[Samba] Windows 2K local groups

[Matt Lung]

Problem:

I have a Redhat 7.1 box with Samba 2.2.5 acting as PDC.  I need to add 
some of my domain users to a local Windows 2K group (the power users 
group).  I open up my local group administration and select the user 
from my domain and attempt to add them and get an error message similar 
to the following:

"A member could not be added to or removed from the local group because 
the member does not exist."


I know this is possible because I have added domain users to a Windows 
2K local group in the past.  There are actually still users in this 
group from the last time I added users.  Since I have added users 
nothing has changed in my Samba config file.  I am still looking at this 
problem and was wondering if anyone else has experience this.  If you 
have or can offer an advice on how to fix this issue please contact me.

Thanks for any help!

Matt

-------------
Smb.conf

# Global parameters
[global]
        workgroup = NEW
        netbios name = PDC
        server string = Samba PDC Server v.2.2.4
        encrypt passwords = Yes
        update encrypted = Yes
        min passwd length = 6
        passwd chat = *New*password* %n\n *Retype*new*password* %n\n 
*modifying*
        username map = /etc/samba/smbusers
        password level = 4
        unix password sync = Yes
        log file = /var/log/samba/log
        max log size = 0
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        domain admin group = @ntadm
        add user script = /usr/sbin/useradd -d /dev/null -g 100 -s 
/bin/false -M %u
        logon script = %U.bat
        logon drive = H:
        logon home = \\%N\%U\%u
        logon path =
        domain logons = Yes
        os level = 65
        preferred master = Yes
        domain master = Yes
        dns proxy = No
        wins support = Yes
        hide local users = Yes
        admin users = administrator
        printer admin = @ntadm
        log level = 0

[homes]
        comment = Home Directories
        read only = No
        browseable = No

[netlogon]
        comment = Network Logon Service
        path = /home/netlogon
        invalid users = bin adm daemon lp sync shutdown halt mail news 
uucp operator games gopher ftp gdm postgres vacation named rebound
        guest ok = Yes
        browseable = No