If you delete any membership of a special built-in Domain Local group on a domain controller, there is no obvious way to re-add the membership.
Example:If you delete Authenticated Users from the Local Users group on a domain controller, you cannot use Active Directory Users and Computers to add Authenticated Users to the Local Users group.
You can use the command line to re-add the membership:
1. Open a CMD.EXE prompt.
2. Type net localgroup users "nt authority\authenticated users" /add and press Enter.
The Windows 2000 special groups are:
Authenticated Users Anonymous Logon Batch Creator Owner Creator Group Dialup Enterprise Domain Controllers Everyone Interactive Network Proxy Restricted Self Service System Terminal Server UserNOTE: A user becomes a member of a special group based upon the activity they are performing. A user becomes a member of the Interactive group when they log on locally. They become members of the Network group when they connect to a computer over the netwrk.