Solved

NT Domain local groups

Posted on 1998-06-03
1
214 Views
Last Modified: 2013-12-28
If I create a local group on an NT domain, should machines that are not domain controllers be able to see these groups?  How would I create a group that a w/s can see that contains users from anothr domain, thatI do not have permission to create groups in, so I would want to pick individual users from the other domain?

For example;
The domain I administer is called MYDOMAIN and a domain that we trust is OTHERDOMAIN, but OTHERDOMAIN does not trust MYDOMAIN.
If I create a global group in MYDOMAIN, I can only add accounts that are a part of MYDOMAIN, however all users here log into OTHERDOMAIN.  I want to create several groups of OTHERDOMAIN users (who are all already in the Global group on OTHERDOMAIN called "MyDomain users").

If I create a global group in MYDOMAIN, I can only add MYDOMAIN users, which doesn't help.

Any ideas?
0
Comment
Question by:tvanlint
1 Comment
 

Accepted Solution

by:
thomsong earned 50 total points
ID: 1781310
Local groups can only be used on the server in which they are created.  You need to create Global groups that can be used on other servers and yes, the global groups can be used on non-domain controllers as long as they are part of the same domain.  

You can not add individual users from a trusted domain into a local group on your domain, they need to be put into global groups on the other domain first.  Then the global groups can be added to local groups on your domain.  Also, you can not add global groups from the other domain to global groups in your domain to be used on a non domain controller.

Even if the other domain trusted your domain you could still not create groups on the other domain because you need to be part of the Domain Admins group on the other domain.  You are not automatically added to the Domain Admins group when a trust is set up.


0

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Recently Microsoft released a brand new function called CONCAT. It's supposed to replace its predecessor CONCATENATE. But how does it work? And what's new? In this article, we take a closer look at all of this - we even included an exercise file for…
An article on effective troubleshooting
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…

789 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question