Domain local groups are groups local to the authentication primary. Search Server can use domain local groups.

On the authentication primary, you must perform some server-side configuration. By convention, the authentication primary is the same server where the Portal web application is installed.

1. Login to the server that is identified as the Authentication primary in Search Server.
2. Open the Computer Management console by selecting Start > Administrative Tools > Computer Management
3. From the Computer Management console, select Computer Management > System Tools > Local Users and Groups > Groups
4. Right-click Groups and select New Group. Provide the group a meaningful name. For example: TLusers.

5. Add users to the domain group.

   Note: Users must be added by domain. For example, users in the tealeaf domain must be added as tealeaf\username.
6. Add users and groups until all Tealeaf users have been added to the local domain. You should create at least two groups, one for users and one for administrators.
7. In Search Server configuration, click Modify beneath Domain Local Groups.
8. Enter the local machine name in the Domains textbox. Do not use localhost.
9. Click the Domain Local Groups checkbox.
10. You can now add users to user groups and admin groups.
11. Click Add to User Groups.

12. Search Server configuration lists the groups defined on the local machine, instead of the domain server.

    Note: Users that are added to the listed groups must be part of the local domain. They cannot be user accounts for the local machine.
13. Repeat the above steps for admin groups.
14. Complete the rest of the configuration for NT authentication.

To modify Search Server authentication:

1. To configure authentication, click Modify in the Authentication area of the main Search Configuration dialog.

2. Modify the options as appropriate for your environment.

   Setting the Authentication Type allows you to specify the type of authentication.