Group visibility between parent and child domains

Discussion in 'Active Directory' started by Athrivarada, Dec 8, 2007.

  1. Athrivarada

    Athrivarada Guest

    I have two Windows 2003 servers hosting Active Directory. One hosts a parent
    domain and the other hosts the child domain. I added a child domain's user to
    a domain local security group in the parent domain. But when I open the child
    domain's dsa.msc I am not able to see the parent group listed in the child
    domain user's "member Of" tab. Can someone please help me know what can I do
    to get the parent group visible in the child domain? Any help is greatly

    Athrivarada, Dec 8, 2007
    1. Advertisements

  2. Domain local groups are only visible in their own domain, although users in
    other domains can be members. I don't think there is a good solution for
    you, short of converting the group to a universal group.
    Richard Mueller [MVP], Dec 8, 2007
    1. Advertisements

  3. Athrivarada

    Athrivarada Guest

    Hi Richard,
    Thanks for the answer.

    I tried with the parent domain group as a universal group. But the group is
    not visible in the "member Of" tab of the child domain user. Even when I use
    ldp.exe I could not list that parent domain group even though I can list the
    same user from the parent domain when I run an LDAP query using ldp.exe to
    get the member attribute for the parent domain group.

    Athrivarada, Dec 12, 2007
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.