Solved

NT Domain local groups

Posted on 1998-06-03
1
233 Views
Last Modified: 2013-12-28
If I create a local group on an NT domain, should machines that are not domain controllers be able to see these groups?  How would I create a group that a w/s can see that contains users from anothr domain, thatI do not have permission to create groups in, so I would want to pick individual users from the other domain?

For example;
The domain I administer is called MYDOMAIN and a domain that we trust is OTHERDOMAIN, but OTHERDOMAIN does not trust MYDOMAIN.
If I create a global group in MYDOMAIN, I can only add accounts that are a part of MYDOMAIN, however all users here log into OTHERDOMAIN.  I want to create several groups of OTHERDOMAIN users (who are all already in the Global group on OTHERDOMAIN called "MyDomain users").

If I create a global group in MYDOMAIN, I can only add MYDOMAIN users, which doesn't help.

Any ideas?
0
Comment
Question by:tvanlint
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 

Accepted Solution

by:
thomsong earned 50 total points
ID: 1781310
Local groups can only be used on the server in which they are created.  You need to create Global groups that can be used on other servers and yes, the global groups can be used on non-domain controllers as long as they are part of the same domain.  

You can not add individual users from a trusted domain into a local group on your domain, they need to be put into global groups on the other domain first.  Then the global groups can be added to local groups on your domain.  Also, you can not add global groups from the other domain to global groups in your domain to be used on a non domain controller.

Even if the other domain trusted your domain you could still not create groups on the other domain because you need to be part of the Domain Admins group on the other domain.  You are not automatically added to the Domain Admins group when a trust is set up.


0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to record audio from input sources to your PC – connected devices, connected preamp to record vinyl discs, streaming media, that play through your audio card: Vista, Windows 7, Windows 8, Windows 8.1 and Windows 10 – both 32 bit & 64.
No single Antivirus application (despite claims by manufacturers) will catch or protect you from all Virus / Malware or Spyware threats. That doesn't stop you from further protecting yourself however - and this article is to show you how.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question