Link to home
Start Free TrialLog in
Avatar of Carlo-Giuliani
Carlo-GiulianiFlag for Canada

asked on

How to grant Exchange Administator rights to users from a trusted domain (different forest)

We have two domains (seperate forests) with a two-way trust between them.  I want to give some users in DomainA administrative rights for the MS-Exchange 2007 server in DomainB.

The "Exchange Organization Administrators" group is a Universal group, and it seems it cannot contain users or groups from a different forest.  

Any suggestions?
Avatar of Manpreet SIngh Khatra
Manpreet SIngh Khatra
Flag of India image

Create a Group that will be member of this Group and make DomainA users of that new group

- Rancy
Avatar of Carlo-Giuliani

ASKER

I tried that.  A universal group can contain only global groups or universal groups from the same forest.
ASKER CERTIFIED SOLUTION
Avatar of Akhater
Akhater
Flag of Lebanon image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
The article link from Akhater is exactly what I need...but I am going to give his response a low "quality" score because he is completely wrong about universal groups.  To quote , support.microsoft.com/kb/884417 "A universal group is a security or distribution group that contains users, groups, and computers from any domain in its forest as members"