Re: sub domain

From: Laura E. Hunter \(MVP\) (hunter(nospamplease)_at_sfs.upenn.edu)
Date: 09/01/04 

Date: Wed, 1 Sep 2004 10:55:37 -0400

In a Windows 2000 network, parent and child domains have an automatic
two-way trust relationship between them, so you can assign permissions to
resources in both domains using the user accounts in each.

As a best practice, you'll create a global group in each domain containing
the users FROM that domain, then add both global groups to a Domain Local
group in the domain containing the resource they need access to. Finally,
assign permissions to the Domain Local group. This creates the most
flexibility and easy maintenance as users move in and out of different roles
and groups. 

-- 
******************************
Laura E. Hunter - MCSE, MCT, MVP
Replies to newsgroup only
"Curt Shaffer" <curt@chilitech.net> wrote in message 
news:ch4k8c11hif@enews3.newsguy.com...
>I have just created a subdomain for our network. I don't want to have to 
>recreate the users on the subdomain. I was going to create groups on the 
>subdomain and add the users from the parent to that domain. Is this the 
>best way to accomplish this? Thanks for the help
>
> Curt
>

Relevant Pages

  • RE: Group Permissions
    ... It would be too time consuming to go to every share/resource ... on our network. ... users and groups have permissions there. ... me what resources a particular group has permission to and what permissions ...
    (microsoft.public.windows.server.active_directory)
  • Re: Can I run 2 AD on the same network
    ... permissions to USE the resources though) IF the two ... Domain Master Browsers can "find" ... > Active Directory running on both on the same network? ...
    (microsoft.public.win2000.active_directory)
  • Re: 2 pc network - cant see host files from pc 2 on pc 1
    ... Assuming that you have firewall protection via your internet router try ... workgroup because it will be needed for the network to work correctly. ... see if you can access TCP ports 139 and 445 on computer one of which at ... permissions. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How do you assign permissions to local network users on other m/cs?
    ... Setting up a network via a router, between laptop and pc, I found that ... Experimenting with the permissions via the security tab on the pc's ... Permissions that you assign to a local account on the PC ... Windows XP Professional File Sharing ...
    (microsoft.public.windowsxp.network_web)
  • Re: MS word files wont open after move
    ... This message can appear if a file is saved with permissions. ... almost any resource available from a network (printers, shares, files, ... this message appears if you are using a network ... administrator has purposely turned off your account. ...
    (microsoft.public.word.docmanagement)