Part III, adding foreign groups

[Steve W]

Ok, I have created the trusts and eraticated the metadata, so I'm clean and
ready to go. However, when I go to add groups from the other domain at the
other company, the domain name doesn't show up in the drop down box for
adding users/groups to the universal group, I just see the objects in my
local domain. What am I doing wrong? I know this should be a straightforward
process. Both DCs are in native mode, ours here is 2000 native and the 2003
DC at the other company is also 2000 native.

 

[Jorge_de_Almeida_Pinto]

Ok, I have created the trusts and eraticated the metadata, so
I'm clean and
ready to go. However, when I go to add groups from the other
domain at the
other company, the domain name doesn't show up in the drop
down box for
adding users/groups to the universal group, I just see the
objects in my
local domain. What am I doing wrong? I know this should be a
straightforward
process. Both DCs are in native mode, ours here is 2000 native
and the 2003
DC at the other company is also 2000 native.

universal groups can only contain users and groups from the same
forest as the universal group. it cannot contain users or groups from
outside the forest. for that you need to use (domain) local groups

 

[Steve W]

thank you very much for your help.

universal groups can only contain users and groups from the same
forest as the universal group. it cannot contain users or groups from
outside the forest. for that you need to use (domain) local groups

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Active-Directory-Part-III-adding-foreign-groups-ftopict402011.html
Visit Topic URL to contact author (reg. req'd). Report abuse:

http://www.windowsforumz.com/eform.php?p=1330006