Trust Administration question

[Joe Banks]

We have established a two-way, external, non-transitive trust between two
different trees

1. - FNB running in native mode
2. - Check - running in mixed mode

We would like to establish centralized enterprise administration but we
think that something is not working properly

I can add users from either domain to a resource in another domain but I
can not add users from one domain to a group in the other domain. For
example, I would like to add my admin (FNB/JBANKSA) to the domain admin
group of Check. I can read all of the information but all of the add and
delete buttons are grayed out.

Is this normal?

 

[Kevin Sullivan]

global group only contain certain security principles from its own domain.
So trying to add a user from domain 1 to Domain Admin (GG) in domain 2
should not work.

Try adding the user to the Built-in Administrator's group.