<div>
Does the other domain really need to be in mixed mode - does it realy still have NT4 Domain Controllers ?
</div>


Does the other domain really need to be in mixed mode - does it realy still have NT4 Domain Controllers ?

<div>
It needs to stay where it is for now - politics.
</div>


It needs to stay where it is for now - politics.

<div>
<div class="content wysiwyg-content">
Setting up a trust between two domains, one is still in 2000-mixed mode, two-way external since forest trusts can't be done in mixed mode.<br />
<br />
I have read that creating universal groups in the trusted domain and adding it to a domain local group in the trusting domain is the best way to assign permissions to resources. &nbsp;However, since we're stuck in Mixed mode for the time being, universal groups are unavailable.<br />
<br />
Can I achieve the same thing with a global group in the trusted domain and assign it to a domain local in the trusting domain?<br />
<br />
Also, what types of resources would I *not* want to assign permissions to with domain local groups?<br />
<br />
Thanks!
</div>
</div>


Setting up a trust between two domains, one is still in 2000-mixed mode, two-way external since forest trusts can't be done in mixed mode.

I have read that creating universal groups in the trusted domain and adding it to a domain local group in the trusting domain is the best way to assign permissions to resources.  However, since we're stuck in Mixed mode for the time being, universal groups are unavailable.

Can I achieve the same thing with a global group in the trusted domain and assign it to a domain local in the trusting domain?

Also, what types of resources would I *not* want to assign permissions to with domain local groups?

Thanks!

Groups in a 2000-mixed Domain Trust

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).