a global group cannot have a cross-domain member

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

I want to add a root Domain User Account with enterprise rights all over my
forest to my Domain Admins Global Group in a child Domain. But I cannot do
that, It shows me this error:

a global group cannot have a cross-domain member

I also tried doing it by using ADSI but it didnt function.

Any help would be greatly appreciated
Oswaldo

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

"Oswaldo." <Oswaldo@discussions.microsoft.com> wrote in message
news:CE125BB4-7600-406D-A28F-C6FCE207061B@microsoft.com...
> I want to add a root Domain User Account with enterprise rights all over
my
> forest to my Domain Admins Global Group in a child Domain. But I cannot do
> that, It shows me this error:
>
> a global group cannot have a cross-domain member
>
> I also tried doing it by using ADSI but it didnt function.
>
> Any help would be greatly appreciated

That is just the way it works.

Create a Global group in EACH domain and
add them to the Local (resource domain or
server) group.

Or use a Universal if you are in Native mode.
(Usually better to put USERS into Globals
and than into Universals directly anyway so
it looks pretty much the same.)

--
Herb Martin


> Oswaldo