Trusted Domain Global Groups

[MJC]

I have two Domains, 2000 Active Directory domain & NT4 Domain. I setup a
trust between the two domains...and added the Domain Adminis global group to
the administrators group for both domains.

When I look at my NT4 domain, the group name does not appear...the SID
number appears. Does anyone know why this happens?

 

[Herb Martin]

I have two Domains, 2000 Active Directory domain & NT4 Domain. I setup a
trust between the two domains...and added the Domain Adminis global group to
the administrators group for both domains.

External Trusts are not fully explained until you give
the trust DIRECTION but since you say you added the
groups both directions we may presume you made not
one trust but a pair of trusts?

When I look at my NT4 domain, the group name does not appear...the SID
number appears. Does anyone know why this happens?

"look at NT4 domain" Look where?

Chances are it is an authenitication or straight
name resolution problem -- most problems of
authentication and replication are name resolution
anyway.

Do you have more than one subnet? If so, you have
a practical need for WINS Server (with a single
replicated database.)

 

[MJC]

I created a two way non-transitive trust between a NT4 Domain and A Windows
2000 Domain. When I open User Manager for Domains on my NT 4 domain I can
add the Domain Admins group from my Windows 2000 domain to the domain local
administrators group. When I go back into user manager for domains, the
Windows 2000 Domain Admins group is list as RPHI\Account Unknown.

We have WINS running and DNS...no issues, or at least that I am aware of.

 

[Herb Martin]

I created a two way non-transitive trust between a NT4 Domain and A Windows
2000 Domain. When I open User Manager for Domains on my NT 4 domain I can
add the Domain Admins group from my Windows 2000 domain to the domain local
administrators group. When I go back into user manager for domains, the
Windows 2000 Domain Admins group is list as RPHI\Account Unknown.

We have WINS running and DNS...no issues, or at least that I am aware of.

Are all DC ( BDCs too) WINS clients of a single
WINS database?

Many people overlook that 'servers' are (need to be)
WINS and Dynamic DNS clients too.

If one of the BDCs cannot find a DC in the other domain
then it will not have the Trusted Groups to list.