Enterprise Admins

[Aver]

Hi,
A new division has just migrated across onto our forest in a new domain.
I can see all the users when I want to give them permissions on a file
share (for example) but when I try to put their admin into the Enterprise
Admins group, I can't see the user listed, and if I try to add them in
directly using "(e-mail address removed)" or "usa\fred" the name won't resolve. Can only
root domain users be put into the Enterprise Admins group?

Thanks,

Aver

 

[Jerold Schulman]

Hi,
A new division has just migrated across onto our forest in a new domain.
I can see all the users when I want to give them permissions on a file
share (for example) but when I try to put their admin into the Enterprise
Admins group, I can't see the user listed, and if I try to add them in
directly using "(e-mail address removed)" or "usa\fred" the name won't resolve. Can only
root domain users be put into the Enterprise Admins group?

Thanks,

Aver

A KB search only reveals the following possibly relevant articles:
http://support.microsoft.com?kbid=232199 "Description and Update of the Active Directory AdminSDHolder Object "
http://support.microsoft.com?kbid=296854 "Restricted Groups Are Limited to Local Domain Members Only "


Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com

 

[Ryan Hanisco]

Were these users migrated over or do you just have a trust between the
forests??

If it is just a trust, then you can't add them directly. In this case, you
will have to deal with them as foreign security principals.

Take a look at the following reference:
http://www.microsoft.com/resources/...v/2003/all/techref/en-us/w2k3tr_princ_how.asp