Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Groups in a 2000-mixed Domain Trust

Posted on 2011-02-18
3
Medium Priority
?
367 Views
Last Modified: 2012-05-11
Setting up a trust between two domains, one is still in 2000-mixed mode, two-way external since forest trusts can't be done in mixed mode.

I have read that creating universal groups in the trusted domain and adding it to a domain local group in the trusting domain is the best way to assign permissions to resources.  However, since we're stuck in Mixed mode for the time being, universal groups are unavailable.

Can I achieve the same thing with a global group in the trusted domain and assign it to a domain local in the trusting domain?

Also, what types of resources would I *not* want to assign permissions to with domain local groups?

Thanks!
0
Comment
Question by:Figin
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 70

Expert Comment

by:KCTS
ID: 34927805
Does the other domain really need to be in mixed mode - does it realy still have NT4 Domain Controllers ?
0
 

Author Comment

by:Figin
ID: 34927909
It needs to stay where it is for now - politics.
0
 
LVL 85

Accepted Solution

by:
oBdA earned 2000 total points
ID: 34927963
You can do that with global groups as well.
And you should actually control access to all resources with (domain) local groups (start here for details: http://en.wikipedia.org/wiki/AGDLP), and then add global groups with the users to the local groups they need to access.
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Compliance and data security require steps be taken to prevent unauthorized users from copying data.  Here's one method to prevent data theft via USB drives (and writable optical media).
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question