Solved

Need Global groups converted to Domain-Local

Posted on 2006-10-25
5
1,340 Views
Last Modified: 2008-02-01
We have a lot of Global groups in our 2003 AD. We have merged with another company and despite the two-way trust relationship with their Domain we have some difficulties assigning their user/groups to our some of our groups since they are Global. Ideally the groups needed to have been Domain-Local. Is there a way to convert Global groups to Domain-Local? I haven't found anything on the web that says this can be done - so am not sure if it is even possible. I have explored SubInACL but have not found any solution yet. Any help would be appreciated.
0
Comment
Question by:jshahpitt
  • 3
  • 2
5 Comments
 
LVL 12

Accepted Solution

by:
Chris Staunton earned 250 total points
ID: 17803162
You first have to change them to Universal then to Domain Local

Cheers,


Shoota
0
 

Author Comment

by:jshahpitt
ID: 17803662
Need Global groups converted to Domain-Local
0
 
LVL 12

Expert Comment

by:Chris Staunton
ID: 17803688
Change the Global group to Universal.  Apply settings then change it to Domain Local.  Since Global groups can not be changed to Domain Local you have to use this step to first change them to Universal, then to Domain Local.


Shoota
0
 

Author Comment

by:jshahpitt
ID: 17803706
Sorry - earlier comment posted in error.

Thanks Shoota - that was a simple fix indeed!!!
0
 
LVL 12

Expert Comment

by:Chris Staunton
ID: 17803716
Awesome :)

Glad to help!
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question