Universal group, users from different forests

From: sony (bluesand4_at_hotmail.com)
Date: 06/21/04 

Date: 21 Jun 2004 07:38:08 -0700

Hi all,
I have two forests which have a two way trust relationship. I need to
add users from one forest to a universal group in the other forest,
but I cannot see the other forest. Why?
Note: when I try the same but with a domain local group it works.

Regards,
Sony

Relevant Pages

  • Re: Cross Forest Administration
    ... Given that EA is a Universal Group it can ... contain objects from another forest is Domain Local. ... Enterprise Admins is a Universal group. ... users and trusts Forest C. Forest B holds resources used by internal ...
    (microsoft.public.windows.server.active_directory)
  • RE: restricted groups?
    ... transitive trust relationship between all domain in the forest, ... > impression that you create a Universal Group and add the Domain Admins from ... > A global group can contain other global groups and accounts from the same ... > other domain local groups from the same domain that the group belongs to. ...
    (microsoft.public.windows.server.active_directory)
  • RE: restricted groups?
    ... > transitive trust relationship between all domain in the forest, ... >> impression that you create a Universal Group and add the Domain Admins from ... >> A global group can contain other global groups and accounts from the same ...
    (microsoft.public.windows.server.active_directory)
  • Re: Can I permission a GPO to an univesal group ?
    ... same forest), you can add Users from different child domains to the Universal ... In the security filter of the GPO, check to make sure the READ and APPLY ... GROUP POLICY are set to 'Allow' for your Universal group, ... > an OU where I have a terminal server. ...
    (microsoft.public.windows.terminal_services)
  • Re: W2K3 cross domain trust
    ... > 2-way external non-transitive trust was formed between the domains. ... >> forest in which you reside. ... >>>> The group in abc.com is a universal group. ... >>> fuctional level of your domain higher than W2K Native mode. ...
    (microsoft.public.windows.server.active_directory)