Global Group Question

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: amyl@xxxxxxxxxxxx
Date: 7 Jul 2005 09:34:43 -0700

Can global groups in one domain be used in another domain that is in a
seperate forrest for security permissions? Both domains have trusts
back and forth.

We tried it and had no sucess - however if we switched the group to
univeral it worked fine. The forrest where the global group resides is
a full windows 2003 domain (native mode) and the domain where the
global group is trying to be added is a windows 2000 mixed mode
forrest.

Thanks for any insight
Amy.

.

Follow-Ups:
- Re: Global Group Question
  - From: Herb Martin

Prev by Date: Re: reviving ad after first dc crashed
Next by Date: 2000 server DNS problem?
Previous by thread: reviving ad after first dc crashed
Next by thread: Re: Global Group Question
Index(es):
- Date
- Thread

Relevant Pages

RE: Migrating Groups - How to know if they are being used.
... To migrate a Windows NT 4.0 global group to a Windows 2000 domain local ... Migrate the global group and its SID to the Windows 2000 domain using ... Microsoft Partner Online Support ... This posting is provided "AS IS" with no warranties, ...
(microsoft.public.windows.server.migration)
Re: Native Mode vs Mixed Mode
... domain administrators group and have full control of the ... software application process, the global group creation ... to native mode, but that did not change the error. ... >> The server is unwilling to process the request. ...
(microsoft.public.win2000.security)
RE: Can not see users in other domain
... "Grog" wrote: ... when I choose the location windows 2000 domain, I can not browse the domain ... because global group can only have members fromits own domain ... But your problem appears to be otherwise, seems like the trust has been ...
(microsoft.public.windows.server.active_directory)
Re: Can not see users in other domain
... Verify Dns settings, make sure that both domains can ping eachother by ... I can see the two domains name (windows 2000 and windows 2003) but ... When you try to add users/groups from the 2000 domain to a global group ... But your problem appears to be otherwise, seems like the trust has ...
(microsoft.public.windows.server.active_directory)
RE: Can not see users in other domain
... when I choose the location windows 2000 domain, I can not browse the domain ... because global group can only have members fromits own domain ... "Grog" wrote: ... Check the trust between the 2 domains again. ...
(microsoft.public.windows.server.active_directory)