Re: Adding a User from One Domain to a Group in Another Domain



Well, I had wanted an Enterprise Admin account on Domain A to also be
Enterprise Admin on Domain B, but I guess that's not normal. Probably I
should of added Domain B to the Domain A Forest, rather than making it it's
own Forest.

"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:eNT2%23gpwGHA.1888@xxxxxxxxxxxxxxxxxxxxxxx
Groups may be moved in or put of the Users container, so one cannot
guess (fully) what you are seeing there. However, it is a rule that you
may not add externals to domain globals. While natively there are some
domain locals in Users, Builtins holds domain locals, and Users does not
hold builtin groups.


"Andrew Hayes" <AndrewHayes@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:eT0S2ynwGHA.2208@xxxxxxxxxxxxxxxxxxxxxxx
I have 2 W2K3 domains with a two-way trust relationship between them, and
I would like to add a user from Domain A to one of the groups in Domain B.
Unfortunately, all I can seem to do is only add users from Domain A to one
of the Built-in groups of Domain B, not to any of the groups in the Users
container.

Is this at all possible?





.



Relevant Pages

  • Re: Place holder root domain advantage
    ... Please no e-mails, any questions should be posted in the NewsGroup ... admin in a single forest root domain model, could gain enterprise admin ... permissions and modify the schema and cause forest wide damage. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Place holder root domain advantage
    ... Any admin in a forest, if smart enough can work to gain permissions to ... Paul Bergson ... MVP - Directory Services ... admin in a single forest root domain model, could gain enterprise admin ...
    (microsoft.public.windows.server.active_directory)
  • Re: Restricting "Enterprise Admins" sec group
    ... Enterprise Admin is god in the forest they live in. ... Be it in a child domain or in a separate tree. ... If you need true security, you need separate forests or if it is simply data ...
    (microsoft.public.win2000.active_directory)
  • Re: AD design question
    ... a single forest with two domains and two single ... forest and within a short period of time, I will be an enterprise admin. ... Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD design question
    ... forest and within a short period of time, I will be an enterprise admin. ... Joe Richards Microsoft MVP Windows Server Directory Services ... trust it is only between the two domains (unless you do a forest ...
    (microsoft.public.windows.server.active_directory)