Part III, adding foreign groups

G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

Ok, I have created the trusts and eraticated the metadata, so I'm clean and
ready to go. However, when I go to add groups from the other domain at the
other company, the domain name doesn't show up in the drop down box for
adding users/groups to the universal group, I just see the objects in my
local domain. What am I doing wrong? I know this should be a straightforward
process. Both DCs are in native mode, ours here is 2000 native and the 2003
DC at the other company is also 2000 native.
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

"" wrote:
> Ok, I have created the trusts and eraticated the metadata, so
> I'm clean and
> ready to go. However, when I go to add groups from the other
> domain at the
> other company, the domain name doesn't show up in the drop
> down box for
> adding users/groups to the universal group, I just see the
> objects in my
> local domain. What am I doing wrong? I know this should be a
> straightforward
> process. Both DCs are in native mode, ours here is 2000 native
> and the 2003
> DC at the other company is also 2000 native.

universal groups can only contain users and groups from the same
forest as the universal group. it cannot contain users or groups from
outside the forest. for that you need to use (domain) local groups

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Active-Directory-Part-III-adding-foreign-groups-ftopict402011.html
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1330006
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

thank you very much for your help.


"Jorge_de_Almeida_Pinto" <UseLinkToEmail@WindowsForumz.com> wrote in message
news:3_1330006_5f48c503b7b1be4f52e9c9456b1684f7@windowsforumz.com...
> "" wrote:
> > Ok, I have created the trusts and eraticated the metadata, so
> > I'm clean and
> > ready to go. However, when I go to add groups from the other
> > domain at the
> > other company, the domain name doesn't show up in the drop
> > down box for
> > adding users/groups to the universal group, I just see the
> > objects in my
> > local domain. What am I doing wrong? I know this should be a
> > straightforward
> > process. Both DCs are in native mode, ours here is 2000 native
> > and the 2003
> > DC at the other company is also 2000 native.
>
> universal groups can only contain users and groups from the same
> forest as the universal group. it cannot contain users or groups from
> outside the forest. for that you need to use (domain) local groups
>
> --
> Posted using the http://www.windowsforumz.com interface, at author's
request
> Articles individually checked for conformance to usenet standards
> Topic URL:
http://www.windowsforumz.com/Active-Directory-Part-III-adding-foreign-groups-ftopict402011.html
> Visit Topic URL to contact author (reg. req'd). Report abuse:
http://www.windowsforumz.com/eform.php?p=1330006