Re: Active directory Child Domain / Root domain

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Your forest needs to be in 2k native or bneter for the Enterprise Admins
group to be universal scoped which will allow you to do this. That said
given you have an empty root with a single child, not much beenfit ot doing
this given you shouldn't have to touch the DCs/root infrastructure at all.
Make the necessary privleged accounts in the root domain and don't use them
unless you actually need them.

--
Thanks,
Brian Desmond
Windows Server MVP - Directory Services

www.briandesmond.com


"Faldana" <Faldana@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:68D961BD-93C4-4368-8B41-026FD49CD2F1@xxxxxxxxxxxxxxxx
We have a forest with a root domain and child domain. We do not have any
ou's or users created on the Root domain. I am a domain admin on the
child
domain and I have the administrator password and can log into the root
domain. The question I have is how do I add myself and my team (our AD
accounts reside on the child domain) to the enterprise admins group on the
root domain? I have tried logging into the root domain with the
administraor
password. I then bring up ADUC and open the enterprise admins group and
try
and add indivual users from the child domain but I do not find any.
--
Ferd


.



Relevant Pages

  • Enterprise admins - help
    ... have admins right on both root and child domain controllers. ... I have try to add Enterprise Admins (or root Domain Admins) to child Domain ... Admins group but the system do not allow me to. ...
    (microsoft.public.windows.server.active_directory)
  • Re: search for a guid
    ... The object is listed as being a member of the exchange enterprise admins group. ... > my ADUC but i cant remvoe it, i cant even remove it using ADSIEDIT. ...
    (microsoft.public.win2000.active_directory)
  • Re: Enterprise Root CA
    ... Verify that the Enterprise Admins group is added to the membership of ... Brian ...
    (microsoft.public.windows.server.security)
  • Re: How to Add Enterprise Admin Right
    ... You can edit the membership of the Enterprise Admins group as well the ... schema group, ensure you have selected the location to entire directory and ...
    (microsoft.public.windows.server.active_directory)
  • Changing Enterprise Admins group breaks workflow?
    ... I just added two users from different child domains to the Enterprise Admins group in my root domain and at exactly the same time my workflow application on my Exchange server started throwing the following errors. ...
    (microsoft.public.exchange2000.admin)