Parent/Child Domain problem

[Mark Smith]

My company's second office grew and a child domain was created to
have a domain controller to do file replication but still keep control
of all our user accounts in the parent domain. When the child domain
creates a group under AD Users and Computers they can only access
external contacts from the parent domain.

Is there a way to allow the child domain to create a security group
that will include members of the parent domain? Only the parent
domain has the user accounts. Do the accounts need to be moved to the
child domain? What is the best resource for "gotchas" on parent/child
domains in Win2k?


Thank you

Mark Smith
(e-mail address removed)

 

[Herb Martin]

Is there a way to allow the child domain to create a security group

that will include members of the parent domain? Only the parent
domain has the user accounts. Do the accounts need to be moved to the
child domain? What is the best resource for "gotchas" on parent/child
domains in Win2k?

Sure, just create Local Groups on the Child Domain (or Child Domain
Servers) and add the Global Groups from the Parent domain -- put the
parent domain users in parent domain Global groups to make managing
easier.

I am presuming you made the Domain a "child domain in the same forest".
If so, there is an automatic two-way trust that allows the above.

Since you didn't find this on your own, I am concerned that perhaps you
didn't actually add the second domain to the same forest.