I may be doing something wrong when I try to add a user from another domain in the forest using DSMOD.
This is the syntax I use:
dsquery user forestroot -name "<NAME OF USER>" | dsmod group "DN OF GROUP" -addmbr
When I use that command and the user is in the London domain it works fine, but if I try with a user from, for example, Japan, then it fails with the error: The specified group type is invalid.
This happens for both Security and Distribution groups. And they are, naturally, universal groups.
If I add the users via Active Directory Users & Groups MMC, then I can add them fine.