Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

NT Domain local groups

Posted on 1998-06-03
1
Medium Priority
?
257 Views
Last Modified: 2013-12-28
If I create a local group on an NT domain, should machines that are not domain controllers be able to see these groups?  How would I create a group that a w/s can see that contains users from anothr domain, thatI do not have permission to create groups in, so I would want to pick individual users from the other domain?

For example;
The domain I administer is called MYDOMAIN and a domain that we trust is OTHERDOMAIN, but OTHERDOMAIN does not trust MYDOMAIN.
If I create a global group in MYDOMAIN, I can only add accounts that are a part of MYDOMAIN, however all users here log into OTHERDOMAIN.  I want to create several groups of OTHERDOMAIN users (who are all already in the Global group on OTHERDOMAIN called "MyDomain users").

If I create a global group in MYDOMAIN, I can only add MYDOMAIN users, which doesn't help.

Any ideas?
0
Comment
Question by:tvanlint
1 Comment
 

Accepted Solution

by:
thomsong earned 200 total points
ID: 1781310
Local groups can only be used on the server in which they are created.  You need to create Global groups that can be used on other servers and yes, the global groups can be used on non-domain controllers as long as they are part of the same domain.  

You can not add individual users from a trusted domain into a local group on your domain, they need to be put into global groups on the other domain first.  Then the global groups can be added to local groups on your domain.  Also, you can not add global groups from the other domain to global groups in your domain to be used on a non domain controller.

Even if the other domain trusted your domain you could still not create groups on the other domain because you need to be part of the Domain Admins group on the other domain.  You are not automatically added to the Domain Admins group when a trust is set up.


0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When asking a question in a forum or creating documentation, screenshots are vital tools that can convey a lot more information and save you and your reader a lot of time
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
How to fix incompatible JVM issue while installing Eclipse While installing Eclipse in windows, got one error like above and unable to proceed with the installation. This video describes how to successfully install Eclipse. How to solve incompa…

972 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question