"A new member could not be added" error message when you try to add a built-in group to a domain local group in Windows Server 2003 (842217)


The information in this article applies to:

  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, 64-Bit Enterprise Edition
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server

SYMPTOMS

When you use the net localgroup local group name "nt authority\authenticated users" /add command to add a built-in group to a domain local group in Microsoft Windows 2000 Server or Microsoft Windows Server 2003, you receive the following error message:
System error 1388 has occurred. A new member could not be added to a local group because the member has the wrong account type.

CAUSE

This issue occurs because domain local groups can contain any security principal except a built-in group in Windows 2000 Server or Windows Server 2003.

WORKAROUND

To work around this issue, do not add a built-in group to a domain local group in Windows 2000 Server or Windows Server 2003.
Modification Type:MajorLast Reviewed:9/3/2004
Keywords:kberrmsg kbwinservperf kbMgmtServices kbprb KB842217 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.