NT4 and 2000 Trust

From: Ken Loveless (KenLoveless_at_discussions.microsoft.com)
Date: 04/28/05 

Date: Thu, 28 Apr 2005 14:40:06 -0700

NT4 domain trusts the 2000 domain, but not vice versa
Can I add a user from the 2000 domain to a local domain group in the NT4
domain?

We are doing a migration and there is a subset of computers that have the
NT4DOMAIN\APPSAdmins domain local group in the local administrator group. If
I can add the 2000Domain\user account to the NT4DOMAIN\APPSAdmins group, it
would save me a little bit of time because I could script a lot of the
security changes that need to be made using the 2000Domain\user account that
would have access to change security as well as be able to browse AD in the
2000 domain.

The domain admin will not even let me try to do it. Says "It's NT, so it
won't work." Seems to me is should, somehow.