domain admin group of parent domain is NOT a member domain admin g

G

Guest

We have a windows 2000 active directory network in mixed mode. We have one
forest with one parent domain and just recently added one child domain.

My problem is that the domain admins in the parent domain are NOT a member
or are not domain admins of the child domain.

I need help on troubleshooting this issue. Any suggestions, tools to use
etc. is much appreciated.
 
G

Guest

What is your goal here? If it's just to have the parent domain admins have
the admin role in your child domain you should just be able to add them. In
your child domain Users OU, you'll see domain admins. Just go to properties
on this, click the dropdown and select your parent domain admins group.

AJ, MCSE
 
S

Steve Athanas

A.J. has this right on. Just to add, you shouldn't expect that the
parent domain's admins will propagate down to the child domain. That's
what the Enterprise Domain group is for, as that is forest-wide. So
don't worry that anything is misconfigured. This is what is supposed to
happen.

Take care.
_______________
Steve Athanas
MCSE (2003)
 
H

Herb Martin

TJ said:
We have a windows 2000 active directory network in mixed mode. We have one
forest with one parent domain and just recently added one child domain.

My problem is that the domain admins in the parent domain are NOT a member
or are not domain admins of the child domain.

I need help on troubleshooting this issue. Any suggestions, tools to use
etc. is much appreciated.

[Same as what the other two responders said,
with this addition.]

The parent admins are NOT expected to be
admins of other domains UNLESS the parent
is THE ROOT FOREST domain -- then they
get the privileges by being Enterprise Admins.
[/QUOTE]
 
S

Steve Athanas

Hi, Herb:

I think that that is only true if you have placed the root domain's
admins in the Enterprise Admins group.

In my experience, only the actual "Administrator" account has the
automatic enterprise admin credential.

Then again, I've had a long day, and could be wrong. Off to test it in
VM-land.

__________________
Steve Athanas
MCSE (2003)

Herb said:
We have a windows 2000 active directory network in mixed mode. We have
one

forest with one parent domain and just recently added one child domain.

My problem is that the domain admins in the parent domain are NOT a member
or are not domain admins of the child domain.

I need help on troubleshooting this issue. Any suggestions, tools to use
etc. is much appreciated.


[Same as what the other two responders said,
with this addition.]

The parent admins are NOT expected to be
admins of other domains UNLESS the parent
is THE ROOT FOREST domain -- then they
get the privileges by being Enterprise Admins.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top