Re: Universal group, users from different forests

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 06/23/04

  • Next message: Craig: "User Rights in Mixed Domain" 
    Date: Wed, 23 Jun 2004 00:10:35 -0700

    You may need to provide more information.
    These are forests are in Windows 2003 forest native mode?
    And, this two-way trust you mention is a forest trust, as is only
    available in Windows 2003, rather than a pair of external
    domain trusts ? 

    -- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"sony" <bluesand4@hotmail.com> wrote in message
news:98dae2ed.0406210638.dcaaf29@posting.google.com...
> Hi all,
> I have two forests which have a two way trust relationship. I need to
> add users from one forest to a universal group in the other forest,
> but I cannot see the other forest. Why?
> Note: when I try the same but with a domain local group it works.
>
> Regards,
> Sony
  • Next message: Craig: "User Rights in Mixed Domain"

    Relevant Pages

    • Re: Raising the Domain and Forest Mode
      ... See also this article because of different security settings between NT4 and 2003 trust. ... domain (Windows Server 2003 Domain Mode) and a Windows NT domain, ... What you can think about is using forest trust's instead of two-way. ... The functional levels of the domain/forest are ...
      (microsoft.public.windows.server.active_directory)
    • Re: Re: Re: Re: Gradually migrate from Win2000 to Win2003 AD
      ... > Thanks for the info. Windows 2003 is quite new to me so I will have to ... > NTFS is far more effective and adding share permissions only ... >> This is approximated by Forest level trusts. ... >> trust between the two forests to be transitive to all ...
      (microsoft.public.win2000.active_directory)
    • Re: AzMan with 2000 mixed DC
      ... One of the reasons W2k3 domain and forest funtional levels ... the roles has map to back over the trust. ... Microsoft MVP (Windows Security) ... > We are deploying an application which uses AzMan, with the store in AD, ...
      (microsoft.public.security)
    • Re: Domain Functional Levels and Trusts
      ... > a Windows 2000 Mixed Mode domain? ... >>> I need to build a trust between two domains in separate forests. ... >>> Domain Functional Level. ... >> a pair of domains which are not in the same forest. ...
      (microsoft.public.windows.server.active_directory)
    • Re: creating one way trust
      ... of different forest. ... It sounds for me that you do not need/have a trust, ... Once everything is replicated from the win2k svr. ... Let me try to understan a little more about youre network. ...
      (microsoft.public.windows.server.active_directory)