Solved

can not see a group in AD

Posted on 2014-02-12
3
244 Views
Last Modified: 2014-02-28
there is a group named MOM_S_PRE_DB_Owner which is Group type=Security and Group Scope=Domain Local in abc.com domain but we are trying to choose this group from def.com domain on Active directory but we did not see this group when we search in AD..but the person in abc domain says I see this user AD and it exist in this domain so why dont we see this group from our domain? there are trust relationship between two domains and we can see other groups when we search in AD..what is the reason? we are using windows 2008 R2 servers..abc domain and def domain are child domains
0
Comment
Question by:TRocex
3 Comments
 
LVL 14

Accepted Solution

by:
Raj-GT earned 360 total points
ID: 39852991
You need to convert the group into a Universal or Global group as Domain Local groups do not "travel" to other domain. They are "local" to the "domain" they are created on.

See link below for some more informaiton in scoping AD groups.

http://technet.microsoft.com/en-us/library/cc755692%28WS.10%29.aspx
0
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 39853459
I second the answer above. The scope needs to be changed.

Will.
0
 
LVL 9

Expert Comment

by:VirastaR
ID: 39853654
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question