Group visibility between parent and child domains

Discussion in 'Active Directory' started by Athrivarada, Dec 8, 2007.

  1. Athrivarada

    Athrivarada Guest

    I have two Windows 2003 servers hosting Active Directory. One hosts a parent
    domain and the other hosts the child domain. I added a child domain's user to
    a domain local security group in the parent domain. But when I open the child
    domain's dsa.msc I am not able to see the parent group listed in the child
    domain user's "member Of" tab. Can someone please help me know what can I do
    to get the parent group visible in the child domain? Any help is greatly
    appreciated.

    -Athrivarada
     
    Athrivarada, Dec 8, 2007
    #1
    1. Advertisements

  2. Domain local groups are only visible in their own domain, although users in
    other domains can be members. I don't think there is a good solution for
    you, short of converting the group to a universal group.
     
    Richard Mueller [MVP], Dec 8, 2007
    #2
    1. Advertisements

  3. Athrivarada

    Athrivarada Guest

    Hi Richard,
    Thanks for the answer.

    I tried with the parent domain group as a universal group. But the group is
    not visible in the "member Of" tab of the child domain user. Even when I use
    ldp.exe I could not list that parent domain group even though I can list the
    same user from the parent domain when I run an LDAP query using ldp.exe to
    get the member attribute for the parent domain group.

    -Athri
     
    Athrivarada, Dec 12, 2007
    #3
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.