Re: Cannot manage Entreprise CA that is in parent domain from child domain


Thanks for your replay,

I gave permissions not the group but directly to user in the child
domain.
I cannot add a user from a sub-domain to a group in the parent domain
because the functional level is windows 2000 native.

Tomer.


--
tomer_k
------------------------------------------------------------------------
tomer_k's Profile: http://forums.techarena.in/member.php?userid=48458
View this thread: http://forums.techarena.in/showthread.php?t=963312

http://forums.techarena.in

.

Relevant Pages

  • Re: adminDSholder being over zealous!
    ... since previously - the admincount value is also set as 1 on the actual GROUP ... > That means the account is supposed to be using the AdminSDHolder ACL. ... >> {This object is protected from inheriting permissions ... >> CHILD ...
    (microsoft.public.win2000.security)
  • Re: Delegation in AD not working
    ... That is why I wanted dsacls, it is the most accurate display of what is going on ... permissions tab so anything applied to an OU will not impact one of these IDs ... > CHILD ...
    (microsoft.public.win2000.active_directory)
  • Re: manipulating non-inherited permissions on folders
    ... I've noticed that when I create a directory which I establish not to inherit permissions for itself and its children. ... Then I give modify privileges to some normal user, and full control to "administrator" the administrator is actually denied access to any of the child folders. ...
    (microsoft.public.windows.server.general)
  • Re: manipulating non-inherited permissions on folders
    ... I'm trying to set up some limited access folders without having to make ... special groups (containers) nor go through the hassle of using "deny" to ... I establish not to inherit permissions for itself and its children. ... at the parent makes it appear usually that the parent and child permissions ...
    (microsoft.public.windows.server.general)
  • Re: No Global Address list when trying to send an Email
    ... How long ago was the child DC put in place? ... Kevan wrote: ... the problem must be permissions or Global Catalog related. ... I can ping by name the DC and the exchange server so I do not think name ...
    (microsoft.public.exchange.admin)