Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 385
  • Last Modified:

Groups in a 2000-mixed Domain Trust

Setting up a trust between two domains, one is still in 2000-mixed mode, two-way external since forest trusts can't be done in mixed mode.

I have read that creating universal groups in the trusted domain and adding it to a domain local group in the trusting domain is the best way to assign permissions to resources.  However, since we're stuck in Mixed mode for the time being, universal groups are unavailable.

Can I achieve the same thing with a global group in the trusted domain and assign it to a domain local in the trusting domain?

Also, what types of resources would I *not* want to assign permissions to with domain local groups?

Thanks!
0
Figin
Asked:
Figin
1 Solution
 
KCTSCommented:
Does the other domain really need to be in mixed mode - does it realy still have NT4 Domain Controllers ?
0
 
FiginAuthor Commented:
It needs to stay where it is for now - politics.
0
 
oBdACommented:
You can do that with global groups as well.
And you should actually control access to all resources with (domain) local groups (start here for details: http://en.wikipedia.org/wiki/AGDLP), and then add global groups with the users to the local groups they need to access.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now