a global group cannot have a cross-domain member

[Guest]

I want to add a root Domain User Account with enterprise rights all over my
forest to my Domain Admins Global Group in a child Domain. But I cannot do
that, It shows me this error:

a global group cannot have a cross-domain member

I also tried doing it by using ADSI but it didnt function.

Any help would be greatly appreciated
Oswaldo

 

[Herb Martin]

I want to add a root Domain User Account with enterprise rights all over my
forest to my Domain Admins Global Group in a child Domain. But I cannot do
that, It shows me this error:

a global group cannot have a cross-domain member

I also tried doing it by using ADSI but it didnt function.

Any help would be greatly appreciated

That is just the way it works.

Create a Global group in EACH domain and
add them to the Local (resource domain or
server) group.

Or use a Universal if you are in Native mode.
(Usually better to put USERS into Globals
and than into Universals directly anyway so
it looks pretty much the same.)