• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 254
  • Last Modified:

How to grant Exchange Administator rights to users from a trusted domain (different forest)

We have two domains (seperate forests) with a two-way trust between them.  I want to give some users in DomainA administrative rights for the MS-Exchange 2007 server in DomainB.

The "Exchange Organization Administrators" group is a Universal group, and it seems it cannot contain users or groups from a different forest.  

Any suggestions?
1 Solution
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Create a Group that will be member of this Group and make DomainA users of that new group

- Rancy
Carlo-GiulianiAuthor Commented:
I tried that.  A universal group can contain only global groups or universal groups from the same forest.
Universal groups can contains members from any forest, anyhow this should help you

Carlo-GiulianiAuthor Commented:
The article link from Akhater is exactly what I need...but I am going to give his response a low "quality" score because he is completely wrong about universal groups.  To quote , support.microsoft.com/kb/884417 "A universal group is a security or distribution group that contains users, groups, and computers from any domain in its forest as members"
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now