Re: Security Groups



Hello ppt_puppet,

Did you create a forest trust and which kind of trust do you create? Should be a two-way trust if you need access in both directions.

See also here:
http://technet.microsoft.com/en-us/library/cc772808.aspx

http://technet.microsoft.com/en-us/library/cc773010.aspx

http://technet.microsoft.com/en-us/library/cc773178.aspx


Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


We have multiple forest environment.
I have DomainA in ForestA and DomainB in ForestB.
I have created a (Domain Local Security Group) and (Global Security
Group)
in Domain A.
I am trying to give access to a shared folder in DomainB to these two
groups.
It is allowing me to give permissions to both the groups - (Domain
Local
Security Group) and (Global Security Group).
Actually, it should not allow me grant permissions to (Domain Local
Security Group) but it does.

Any idea why?



.



Relevant Pages

  • Security Groups
    ... We have multiple forest environment. ... I have created a (Domain Local Security Group) and (Global Security Group) ... it should not allow me grant permissions to (Domain Local Security ...
    (microsoft.public.windows.server.active_directory)
  • Re: creating one way trust
    ... of different forest. ... It sounds for me that you do not need/have a trust, ... Once everything is replicated from the win2k svr. ... Let me try to understan a little more about youre network. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Huge AD deployment
    ... That was the case in Windows 2000, but in Windows Server 2003 forest trusts ... note though is that a forest trust is only transitive for domains within the ... >> company.com in that data center and have every country trust company.com ... instead of going over the internet. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Functional Levels and Trusts
    ... other type of trust, i.e., Forest Trust ... A Forest Trust and an External trust are TWO DISTINCT types ... FORESTS to be in Win2003 Forest Functional Level. ... External trusts are possible in any MODE, ...
    (microsoft.public.windows.server.active_directory)
  • RE: Two way forest trust fails only in one direction
    ... After deep research of the SMB signing, we saw that both servers need Reg Key: ... needed to match on both servers on both sides of the trust. ... B's Forest, but Company B can not access Company As forest at all. ... running DNS and WINS under Windows Active Directory. ...
    (microsoft.public.windows.server.active_directory)