Re: Should be simple

From: Phillip Renouf (PhillipRenouf_at_discussions.microsoft.com)
Date: 07/27/04


Date: Tue, 27 Jul 2004 11:43:01 -0700

You can't add a Global Group from one domain into a Global Group in another domain.

Add the Domain Admins group from the parent domain into the Local Administrators group in the child domains and delegate the right to modify the domain policy of the child domains (if that is required). Or create domain admin accounts for all your parent domain admin users in each child domain.

Phil

"Richard Burr" wrote:

> Thanks Omer
> All the servers are 2003.
> If the parent domain and the child domain I'm trying to have these users
> administer
> are in 2003 native mode, but the other child domains are in mixed mode,
> would that
> cause a problem?
> When I try to find the global group from the parent domain in the Domain
> Admins > Members > Add > Advanced,
> I get nothing on the list.
>
> "omer maydan" <omermaydan@yahoo.com> wrote in message
> news:uLsA8r7cEHA.4092@TK2MSFTNGP10.phx.gbl...
> > if you are in native mode, Make them as part of a global group in their
> > parent domain, and then add this group to the "Domain Admins" group in
> your
> > child domain. if you are in mixed mode, just add those users into the
> > "Domain Admins" global group in your child domain.
> >
> > --
> >
> > Omer Maydan
> > MCSE,Security+
> > "Richard Burr" <rburr@ccnn4u.com> wrote in message
> > news:u2Ic3Q7cEHA.1152@TK2MSFTNGP09.phx.gbl...
> > > I've lost the forest in the trees.
> > > What is the easiest way to make selected users from the parent domain
> into
> > > administrators for a only single child domain when more than one child
> > > exists?
> > >
> > >
> >
> >
>
>
>



Relevant Pages

  • Re: Native Mode vs Mixed Mode
    ... domain administrators group and have full control of the ... software application process, the global group creation ... to native mode, but that did not change the error. ... >> The server is unwilling to process the request. ...
    (microsoft.public.win2000.security)
  • Re: Native Mode vs Mixed Mode
    ... looking in Event Viewer for any pertinent errors in the system or ... > software application process, the global group creation ... > to native mode, but that did not change the error. ... >>the Event Viewer system and application logs may also ...
    (microsoft.public.win2000.security)
  • Global Group Question
    ... The forrest where the global group resides is ... a full windows 2003 domain (native mode) and the domain where the ...
    (microsoft.public.win2000.active_directory)
  • Re: Changing Child domain from mixed to native mode
    ... >operate in mixed or native mode, ... >> All 2000 servers in parent and child domain are in Mixed ... >> NT4 is a PDC in the parent domain but they want to move ... >> domain must be upgraded from Mixed mode to Native mode. ...
    (microsoft.public.win2000.active_directory)
  • Re: Child Domains and GPOs
    ... Herb, That worked. ... I created a global group in the child domain, ... >> of the forest trusts every other. ...
    (microsoft.public.win2000.active_directory)