Only local groups (class localGroup) can be created for member servers and Windows 2000 Professional.
To create a local group for a member server or computer running Windows 2000 Professional
WinNT://sComputerName , computer
where sComputerName is the name of the computer groups to access.
In the binding string, the ",computer" parameter instructs ADSI that it is binding to a computer. ADSI makes this data available to the WinNT provider's parser so that it can skip some ambiguity-resolution queries to determine what type of object you are binding to.
Note If you specify "group" as the class, ADSI uses "localGroup". Do not specify the class as "globalGroup". Groups of class "globalGroup" cannot be created on member servers or a computer running Windows NT Workstation/Windows 2000 Professional. If you specify "globalGroup," IADsContainer::Create creates the group in the property cache, but IADs::SetInfo does not write the group to the security database and it does not return an error.