Re: Active directory Child Domain / Root domain
- From: "Brian Desmond [MVP]" <brian@xxxxxxxxxxxxxxxx>
- Date: Mon, 4 Jun 2007 19:43:32 -0500
Your forest needs to be in 2k native or bneter for the Enterprise Admins
group to be universal scoped which will allow you to do this. That said
given you have an empty root with a single child, not much beenfit ot doing
this given you shouldn't have to touch the DCs/root infrastructure at all.
Make the necessary privleged accounts in the root domain and don't use them
unless you actually need them.
--
Thanks,
Brian Desmond
Windows Server MVP - Directory Services
www.briandesmond.com
"Faldana" <Faldana@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:68D961BD-93C4-4368-8B41-026FD49CD2F1@xxxxxxxxxxxxxxxx
We have a forest with a root domain and child domain. We do not have any
ou's or users created on the Root domain. I am a domain admin on the
child
domain and I have the administrator password and can log into the root
domain. The question I have is how do I add myself and my team (our AD
accounts reside on the child domain) to the enterprise admins group on the
root domain? I have tried logging into the root domain with the
administraor
password. I then bring up ADUC and open the enterprise admins group and
try
and add indivual users from the child domain but I do not find any.
--
Ferd
.
- Prev by Date: Question about upgrading to Windows 2003 Domain Controllers
- Next by Date: Re: Script to change profile and home directory path for all users
- Previous by thread: Question about upgrading to Windows 2003 Domain Controllers
- Next by thread: Re: Script to change profile and home directory path for all users
- Index(es):
Relevant Pages
|