We are running Windows 2003 AD.
Our forest root is kam.com and we have child domains of uk.kam.com, usa.kam.com and japan.kam.com
I am a domain admin of uk.kam.com
If I go to a the properties of a a UK.kam.com user >Properties > Member of
I can only see groups within the UK domain that he is a member of...likewise, if I try to add him to another group, then I don't even have the ability to select another domain from which to choose the group?
Why is this? Surely I should read permission across the board - I'm just curious to know why I can't see what non-UK group membership he has?