Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

NT Domain local groups

Posted on 1998-06-03
1
Medium Priority
?
249 Views
Last Modified: 2013-12-28
If I create a local group on an NT domain, should machines that are not domain controllers be able to see these groups?  How would I create a group that a w/s can see that contains users from anothr domain, thatI do not have permission to create groups in, so I would want to pick individual users from the other domain?

For example;
The domain I administer is called MYDOMAIN and a domain that we trust is OTHERDOMAIN, but OTHERDOMAIN does not trust MYDOMAIN.
If I create a global group in MYDOMAIN, I can only add accounts that are a part of MYDOMAIN, however all users here log into OTHERDOMAIN.  I want to create several groups of OTHERDOMAIN users (who are all already in the Global group on OTHERDOMAIN called "MyDomain users").

If I create a global group in MYDOMAIN, I can only add MYDOMAIN users, which doesn't help.

Any ideas?
0
Comment
Question by:tvanlint
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 

Accepted Solution

by:
thomsong earned 200 total points
ID: 1781310
Local groups can only be used on the server in which they are created.  You need to create Global groups that can be used on other servers and yes, the global groups can be used on non-domain controllers as long as they are part of the same domain.  

You can not add individual users from a trusted domain into a local group on your domain, they need to be put into global groups on the other domain first.  Then the global groups can be added to local groups on your domain.  Also, you can not add global groups from the other domain to global groups in your domain to be used on a non domain controller.

Even if the other domain trusted your domain you could still not create groups on the other domain because you need to be part of the Domain Admins group on the other domain.  You are not automatically added to the Domain Admins group when a trust is set up.


0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article helps those who get the 0xc004d307 error when trying to rearm (reset the license) Office 2013 in a Virtual Desktop Infrastructure (VDI) and/or those trying to prep the master image for Microsoft Key Management (KMS) activation. (i.e.- C…
By default Outlook 2016 displays only one time zone in the Calendar. The following article explains how to display two time zones in one calendar view.
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question