Solved

Need Global groups converted to Domain-Local

Posted on 2006-10-25
5
1,343 Views
Last Modified: 2008-02-01
We have a lot of Global groups in our 2003 AD. We have merged with another company and despite the two-way trust relationship with their Domain we have some difficulties assigning their user/groups to our some of our groups since they are Global. Ideally the groups needed to have been Domain-Local. Is there a way to convert Global groups to Domain-Local? I haven't found anything on the web that says this can be done - so am not sure if it is even possible. I have explored SubInACL but have not found any solution yet. Any help would be appreciated.
0
Comment
Question by:jshahpitt
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 12

Accepted Solution

by:
Chris Staunton earned 250 total points
ID: 17803162
You first have to change them to Universal then to Domain Local

Cheers,


Shoota
0
 

Author Comment

by:jshahpitt
ID: 17803662
Need Global groups converted to Domain-Local
0
 
LVL 12

Expert Comment

by:Chris Staunton
ID: 17803688
Change the Global group to Universal.  Apply settings then change it to Domain Local.  Since Global groups can not be changed to Domain Local you have to use this step to first change them to Universal, then to Domain Local.


Shoota
0
 

Author Comment

by:jshahpitt
ID: 17803706
Sorry - earlier comment posted in error.

Thanks Shoota - that was a simple fix indeed!!!
0
 
LVL 12

Expert Comment

by:Chris Staunton
ID: 17803716
Awesome :)

Glad to help!
0

Featured Post

Transaction Monitoring Vs. Real User Monitoring

Synthetic Transaction Monitoring Vs. Real User Monitoring: When To Use Each Approach? In this article, we will discuss two major monitoring approaches: Synthetic Transaction and Real User Monitoring.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question