Re: Viewing Trusted Domain Group Memberships

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Dean Wells [MVP] (dwells_at_mask.msetechnology.com)
Date: 08/13/04


Date: Fri, 13 Aug 2004 11:49:34 -0400

mote wrote:
> Have a look in the "ForeignSecurityPrincipals" container in ADUC.
>
>
> "Jeff Grosenbacher" <jag@conseco.com> wrote in message
> news:%23e$6mdIgEHA.1392@TK2MSFTNGP11.phx.gbl...
>> In our Windows 2003 AD domain, we have two domain trees in a single
>> forest. We have a scenario where we add users from one domain into
>> universal distribution groups of the other domain. That works as
>> expected. When we look at the members of the distribution group,
>> users from both domains are listed. However, when we view a user's
>> group memberships, the groups in the trusted domain aren't listed.
>> We would like the ability to be able to add, remove or view these
>> group memberships from the properties of a user. Is this possible
>> using native tools?
>>
>> Thanks.
>> Jeff

ForeignSecurityPrincipals are commonly created for objects that cannot
be resolved against a GC, since these users are in the same forest, that
isn't the case ... it is also likely to be the opposite of Jeff's actual
requirement.

-- 
Dean Wells [MVP / Directory Services]
MSEtechnology
[[ Please respond to the Newsgroup only regarding posts ]]
R e m o v e    t h e    m a s k    t o    s e n d    e m a i l


Relevant Pages

  • Re: Viewing Trusted Domain Group Memberships
    ... > In our Windows 2003 AD domain, we have two domain trees in a single ... forest. ... > distribution groups of the other domain. ... > remove or view these group memberships from the properties of a user. ...
    (microsoft.public.windows.server.active_directory)
  • Viewing Trusted Domain Group Memberships
    ... In our Windows 2003 AD domain, we have two domain trees in a single forest. ... We have a scenario where we add users from one domain into universal ... distribution groups of the other domain. ... remove or view these group memberships from the properties of a user. ...
    (microsoft.public.windows.server.active_directory)
  • Viewing Trusted Domain Group Memberships
    ... In our Windows 2003 AD domain, we have two domain trees in a single forest. ... We have a scenario where we add users from one domain into universal ... distribution groups of the other domain. ... remove or view these group memberships from the properties of a user. ...
    (microsoft.public.windows.server.security)
  • Re: Viewing Trusted Domain Group Memberships
    ... where you can not see the forest for the trees. ... > distribution groups of the other domain. ... > remove or view these group memberships from the properties of a user. ...
    (microsoft.public.windows.server.security)
  • Re: Viewing Trusted Domain Group Memberships
    ... > where you can not see the forest for the trees. ... >> distribution groups of the other domain. ... >> remove or view these group memberships from the properties of a user. ...
    (microsoft.public.windows.server.security)