Viewing user's group membership of other domains

kam_uk
kam_uk used Ask the Experts™
on
Hi

We are running Windows 2003 AD.

Our forest root is kam.com and we have child domains of uk.kam.com, usa.kam.com and japan.kam.com

I am a domain admin of uk.kam.com

If I go to a the properties of a a UK.kam.com user >Properties > Member of

I can only see groups within the UK domain that he is a member of...likewise, if I try to add him to another group, then I don't even have the ability to select another domain from which to choose the group?

Why is this? Surely I should read permission across the board - I'm just curious to know why I can't see what non-UK group membership he has?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Infrastructure Architect
Commented:
Not sure what type of group you are saying about.
Is it a domain local / global or universal group?

Anyways, here is the registry tweak to make users of other domains displayed on a universal group.

http://support.microsoft.com/kb/833883

Cheerio
Shaba
Hello,

This is normal behavior. From the "Membership" tab in ADUC, you can only add users to groups in the same domain. If you want to add the user to a universal group in other domain, you need to open the properties page for that group and add them that way.

As Shaba mentioned, you can apply the hotfix and the universal group membership of other domains will display on the user's membership tab.

JJ

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial