Adding Users from Parent Domain to group in Child domain

[henry]

Hello,

I recently completed the installation of a new child
domain. I wish to add a number of Parent domain users to
the child domain Domain Admins group, but cannot seem to
accomplish it. In fact, i cannot add a user in the
opposite direction either. I check the trusts and all
seem ok.

Anyone have any thoughts?

Thanks,

Henry

 

[Joe Richards [MVP]]

By any chance are the groups global groups? Global groups can only have members from the local domain .

 

[Henry]

Yes they are, sorry for the newbie question, but what
type should they be?

Thanks...

-----Original Message-----
By any chance are the groups global groups? Global

groups can only have members from the local domain .message news:[email protected]...

 

[Joe Richards [MVP]]

They can either be universal or domain local. Depends on where the resources being ACL'ed are located. If all of the
resources are within the domain, then use domain local groups. If the resources a group are securing are spread across
the forest it would have to be a Universal. I am personally not a fan of Universal groups, I prefer domain local as
there are a few gotchas with Universals.