Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

NT Domain local groups

Posted on 1998-06-03
1
Medium Priority
?
259 Views
Last Modified: 2013-12-28
If I create a local group on an NT domain, should machines that are not domain controllers be able to see these groups?  How would I create a group that a w/s can see that contains users from anothr domain, thatI do not have permission to create groups in, so I would want to pick individual users from the other domain?

For example;
The domain I administer is called MYDOMAIN and a domain that we trust is OTHERDOMAIN, but OTHERDOMAIN does not trust MYDOMAIN.
If I create a global group in MYDOMAIN, I can only add accounts that are a part of MYDOMAIN, however all users here log into OTHERDOMAIN.  I want to create several groups of OTHERDOMAIN users (who are all already in the Global group on OTHERDOMAIN called "MyDomain users").

If I create a global group in MYDOMAIN, I can only add MYDOMAIN users, which doesn't help.

Any ideas?
0
Comment
Question by:tvanlint
1 Comment
 

Accepted Solution

by:
thomsong earned 200 total points
ID: 1781310
Local groups can only be used on the server in which they are created.  You need to create Global groups that can be used on other servers and yes, the global groups can be used on non-domain controllers as long as they are part of the same domain.  

You can not add individual users from a trusted domain into a local group on your domain, they need to be put into global groups on the other domain first.  Then the global groups can be added to local groups on your domain.  Also, you can not add global groups from the other domain to global groups in your domain to be used on a non domain controller.

Even if the other domain trusted your domain you could still not create groups on the other domain because you need to be part of the Domain Admins group on the other domain.  You are not automatically added to the Domain Admins group when a trust is set up.


0

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Understanding the various editions available is vital when you decide to purchase Windows Server 2012. You need to have a basic understanding of the features and limitations in each edition in order to make a well-informed decision that best suits …
Unable to change the program that handles the scan event from a network attached Canon/Brother printer/scanner. This means you'll always have to choose which program handles this action, e.g. ControlCenter4 (in the case of a Brother).
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
In this video, viewers will be given step by step instructions on adjusting mouse, pointer and cursor visibility in Microsoft Windows 10. The video seeks to educate those who are struggling with the new Windows 10 Graphical User Interface. Change Cu…
Suggested Courses

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question