sub domain

C

Curt Shaffer

I have just created a subdomain for our network. I don't want to have to
recreate the users on the subdomain. I was going to create groups on the
subdomain and add the users from the parent to that domain. Is this the best
way to accomplish this? Thanks for the help

Curt
 
L

Laura E. Hunter \(MVP\)

In a Windows 2000 network, parent and child domains have an automatic
two-way trust relationship between them, so you can assign permissions to
resources in both domains using the user accounts in each.

As a best practice, you'll create a global group in each domain containing
the users FROM that domain, then add both global groups to a Domain Local
group in the domain containing the resource they need access to. Finally,
assign permissions to the Domain Local group. This creates the most
flexibility and easy maintenance as users move in and out of different roles
and groups.
 
C

Curt Shaffer

I figured that but I need authentication on the subdomain, do I add a second
set of users on the subdomain?

Thanks
 
G

Guest

Each domain will manage have its own set of user accounts. For example you
cannot create a Bob account in the root domain then logon to a child domain
with the Bob account because ChildDomain\Bob does not exist. You could use
RootDomain\Bob to access resources in the child domain with appropriate
permissions.
What are you trying to accomplish by having users login to 2 domains?
If you want the user to authenticate to a DC in the child domain they will
need an account, or as Laura said, use groups to provide the permissions via
groups.
 
C

Cary Shultz [A.D. MVP]

James,

I think that Curt would benefit from ADMT v2?

Cary

Each domain will manage have its own set of user accounts. For example you
cannot create a Bob account in the root domain then logon to a child domain
with the Bob account because ChildDomain\Bob does not exist. You could use
RootDomain\Bob to access resources in the child domain with appropriate
permissions.
What are you trying to accomplish by having users login to 2 domains?
If you want the user to authenticate to a DC in the child domain they will
need an account, or as Laura said, use groups to provide the permissions via
groups.

--
James Brandt [MSFT]


Curt Shaffer said:
I figured that but I need authentication on the subdomain, do I add a
second set of users on the subdomain?

Thanks
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top