Re: folder security on trusted domains

From: Dmitry Korolyov [MVP] (d__k_at_removethispart.mail.ru)
Date: 06/01/04


Date: Tue, 1 Jun 2004 10:03:25 +0400

If your resource is located in DOMAINA and you want to grant permissions to
some users in DOMAINB, create a domain local group in DOMAINA, assign
permissions to that group, create a global group in DOMAINB, add it to the
domain local group from DOMAINA. Then add the users that need access to the
global group in DOMAINB.
There may be other scenarios, involving universal groups for example.

-- 
Dmitry Korolyov [d__k@removethispart.mail.ru]
MVP: Windows Server - Active Directory
  <mmclaugh@westaim.com> wrote in message
news:152fc01c4466b$df2ab6e0$a401280a@phx.gbl...
  Does anyone have any experience with this. I have 2
  domains that trust each other, but cannot set up folder
  security giving permissions from on eto the other.


Relevant Pages

  • Adding accounts in ACLs
    ... Currently, the files have security for domainA, but I would like to ... add permissions for domainB. ... I am not a programmer, ...
    (microsoft.public.win2000.security)
  • reload operating system upgrade
    ... files are on different partition in DomainA, ... wiping out C:drive, all permissions still be there on an ... I don not want to have to reapply permissions. ...
    (microsoft.public.windows.file_system)
  • Re: folder security on trusted domains
    ... >If your resource is located in DOMAINA and you want to ... grant permissions to ... >domain local group from DOMAINA. ... >global group in DOMAINB. ...
    (microsoft.public.windows.file_system)
  • Rendom with Windows 2003
    ... I am planning on renaming the netbios name from domainA to domainB. ... Also what about SQL Permissions? ... Will it change the sql from domainA\group1 access to Database1 ...
    (microsoft.public.windows.server.migration)
  • Re: 2 domains structure
    ... in DomainA permissions to resources in DomainB, and vice versa, without ... > each branch users authenticate to there local domain. ... > up until now, i have created user accounts in both domains, one in the ...
    (microsoft.public.win2000.active_directory)