Domain local groups are groups local to the authentication master. Search Server can use domain local groups.

On the authentication master, you must perform some server-side configuration. By convention, the authentication master is the same server where the Portal web application is installed.

1. Login to the server that is identified as the Authentication Master in Search Server.
2. Open the Computer Management console by selecting Start > Administrative Tools > Computer Management
3. From the Computer Management console, select Computer Management > System Tools > Local Users and Groups > Groups
4. Right-click Groups and select New Group. Provide the group a meaningful name. For example: TLusers.
5. Add users to the domain group.
   Note: Users must be added by domain. For example, users in the tealeaf domain must be added as tealeaf\username.
6. Add users and groups until all Tealeaf users have been added to the local domain. You should create at least two groups, one for users and one for administrators.
7. In Search Server configuration, click Modify beneath Domain Local Groups.
8. Enter the local machine name in the Domains textbox. Do not use localhost.
9. Click the Domain Local Groups checkbox.
10. You can now add users to user groups and admin groups.
11. Click Add to User Groups.
12. Search Server configuration lists the groups defined on the local machine, instead of the domain server.
    Note: Users that are added to the listed groups must be part of the local domain. They cannot be user accounts for the local machine.
13. Repeat the above steps for admin groups.
14. Complete the rest of the configuration for NT authentication.