<div>
TO do what dhoffman_98 said you need to make sure your domain is in Native mode, which supports Universal Group and Group Nesting.
</div>


TO do what dhoffman_98 said you need to make sure your domain is in Native mode, which supports Universal Group and Group Nesting.

<div>
Gee, thanks for the B. I guess my answer wasn't complete enough?
</div>


Gee, thanks for the B. I guess my answer wasn't complete enough?

<div>
<div class="content wysiwyg-content">
Hi,<br />
I´m trying to learn a bit about forest trust.<br />
<br />
Got 2 forest( one domain in forest a and two domains in seperate trees in forest b), and made a foresttrust 2-way. validated the trusts and all seems ok. <br />
When I try to add a user from the trusted forest (b)to a ad group in forrest a I can not see the other forest in the Location window, only :Entire directory, and the local domain.<br />
<br />
But if I create a folder, and set premissions i can see the trusted forest and select a user fom it.<br />
<br />
Did I miss something? am I not suposed to be able to add external users from trusted forest in ad groups?<br />

</div>
</div>


Hi,
I´m trying to learn a bit about forest trust.

Got 2 forest( one domain in forest a and two domains in seperate trees in forest b), and made a foresttrust 2-way. validated the trusts and all seems ok. 
When I try to add a user from the trusted forest (b)to a ad group in forrest a I can not see the other forest in the Location window, only :Entire directory, and the local domain.

But if I create a folder, and set premissions i can see the trusted forest and select a user fom it.

Did I miss something? am I not suposed to be able to add external users from trusted forest in ad groups?


question regarding adding users  to grup from a different forrest

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).

Windows Server 2003

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.