Enterprise Admin Access

[Chris Wolfe]

Hello,
When trying to access the C$ share on hosts in one of our child domains, (in
the same forest) I am challenged for a username and password. I am logged on
as an enterprise admin and I am logged on to the parent domain when
attempting to do this. Here is what I have done to date:
1.) verified the trusts between domains.
2.) Moved FSMO role from Global catalogs to another DC in each domain.
3.) Verified replication between domains.

So, I guess my question is... How do I as a member of the enterprise admins
group gain access to the C$ share on any host that resides in our child
domain? I need to do this because we are installing software remotely (from
the parent domain) and if we can not gain access to the C$ share, the
software will not install remotely.

Thanks,
Chris

 

[Jack]

Check the locan admin group on the machines in the child
domain and you'll partly answer your own question.

By default the domain admin group of the domain the
workstation is in is in the local admin group of the
workstation. Remember that global groups cannot have
global groups as members.

So if the only group in the local admin group is the child
domain's domain admin and the parent's domain admin group
can't be a member of the child domain admin group then how
would the parent domain admin have rights to the local
machine?

So, to make a long story short (too late) you need to add
the domain admin group of the parent domain into the local
admin group of all workstations in the child domain. You
can do that using GPOs with restricted groups, by manually
connecting to each machine and adding the group or you can
use a tool like cusrmgr from the resource kit to script
the change.

-Jack

 

[Chris Wolfe]

Thank you very much. I truly appreciate the assistance but...
I need to clarify my problem better. I was just informed that the resources
I am attempting to access do not reside in a child domain. So here is a what
I hope is a better explanation of what I am doing. I am an enterprise admin
in "domain.ourdomain.com" and I am trying to access the C$ share of machines
in "domain2.ourdomain.net". I hope this helps clarify things a little
better.
Thanks,
Chris