Re: sub domain

From: Curt Shaffer (curt_at_chilitech.net)
Date: 09/01/04


Date: Wed, 1 Sep 2004 11:15:42 -0400

I figured that but I need authentication on the subdomain, do I add a second
set of users on the subdomain?

Thanks

"Laura E. Hunter (MVP)" <hunter(nospamplease)@sfs.upenn.edu> wrote in
message news:ufP6%23ODkEHA.3476@tk2msftngp13.phx.gbl...
> In a Windows 2000 network, parent and child domains have an automatic
> two-way trust relationship between them, so you can assign permissions to
> resources in both domains using the user accounts in each.
>
> As a best practice, you'll create a global group in each domain containing
> the users FROM that domain, then add both global groups to a Domain Local
> group in the domain containing the resource they need access to. Finally,
> assign permissions to the Domain Local group. This creates the most
> flexibility and easy maintenance as users move in and out of different
> roles and groups.
>
>
>
> --
> ******************************
> Laura E. Hunter - MCSE, MCT, MVP
> Replies to newsgroup only
>
>
> "Curt Shaffer" <curt@chilitech.net> wrote in message
> news:ch4k8c11hif@enews3.newsguy.com...
>>I have just created a subdomain for our network. I don't want to have to
>>recreate the users on the subdomain. I was going to create groups on the
>>subdomain and add the users from the parent to that domain. Is this the
>>best way to accomplish this? Thanks for the help
>>
>> Curt
>>
>
>



Relevant Pages

  • Re: Host for Website
    ... i can offer a subdomain off of roguelike.us or ... rogueforge.net and some web space and a variety of other resources if ...
    (rec.games.roguelike.development)
  • Re: Microsoft Security Groups
    ... resources, ... Global and Domain local groups for the past few ... > When would you use this group over a global group and why? ... > Microsoft recommends that you don't apply any permissions to the user ...
    (microsoft.public.security)
  • Re: Subdomain Group Administratration
    ... You can not nest security principals from one domain in a global group in another domain. ... I really wouldn't use domain admin IDs for managing workstations. ... The problem is all PCs join to x.y.local subdomain which only has x.y.local subdomain "domain admin" in local administrator group. ...
    (microsoft.public.win2000.active_directory)
  • Re: subdomain
    ... however access resources in trusted domains if you give them permissions to the ... you can choose users and groups from other trusted domains in the forest to add to ... >I have just created a subdomain for our network. ...
    (microsoft.public.win2000.networking)