How to assign Domain admin credential to User from trusted domain

Hi All,

Sorry to keep bothering you with this one, but I cannot figure it out. I am
still trying to figure out how to migrate users from one Windows 2003 domain
to another one. My problem is the same as the user in this link:

http://forums.techarena.in/active-directory/1214236.htm

apart from the fact he is attempting to migrate to a 2008 domain.

I have tried setting up a Universal group in the target domain (domainB),
but the source domain (domainB)does not appear as an option to choose when I
click the Locations button in add users, computers and groups.

I can set up a domain local group, and the source domain does appear as an
option in the Locations button (both domainA and domainB are there,
underneath entire directory), and I can add the domain admins from the
source to the target domain as a member of this local group.

How do I then add the domain admins from domainA from the local group I have
just created in domainB, to the domain, enterprise and schema admins of
domainB? If I try clicking on the members tab of these accounts, I cannot
add the domain admins from the other domain.

If it helps, I tried converting the domain local group containing the domain
admins account from the other domain, to a universal group, and got an error
message saying that a universal account cannot contain a foreign security
principal.

I really would appreciate help in solving this, thanks, Anastas.

Hello Mikoyan,

Please stick to your first posting.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi All,
>
> Sorry to keep bothering you with this one, but I cannot figure it out.
> I am still trying to figure out how to migrate users from one Windows
> 2003 domain to another one. My problem is the same as the user in this
> link:
>
> http://forums.techarena.in/active-directory/1214236.htm
>
> apart from the fact he is attempting to migrate to a 2008 domain.
>
> I have tried setting up a Universal group in the target domain
> (domainB), but the source domain (domainB)does not appear as an option
> to choose when I click the Locations button in add users, computers
> and groups.
>
> I can set up a domain local group, and the source domain does appear
> as an option in the Locations button (both domainA and domainB are
> there, underneath entire directory), and I can add the domain admins
> from the source to the target domain as a member of this local group.
>
> How do I then add the domain admins from domainA from the local group
> I have just created in domainB, to the domain, enterprise and schema
> admins of domainB? If I try clicking on the members tab of these
> accounts, I cannot add the domain admins from the other domain.
>
> If it helps, I tried converting the domain local group containing the
> domain admins account from the other domain, to a universal group, and
> got an error message saying that a universal account cannot contain a
> foreign security principal.
>
> I really would appreciate help in solving this, thanks, Anastas.
>