Establishing Forest Trust RRS feed

  • Question

  • I have set up a transitive forest trust between my Windows 2003 forest and another Windows 2003 forest.  Both sides of the trust appear to be set up correctly in the AD Domains & Trusts.  However, when I try to add a user from the other forest to a security group in my forest, I am not given the trusted forest as an option.  Can anyone help?




    Thursday, July 21, 2011 5:25 PM


All replies

  • Paul, the issue is most likely due to the fact that you are not following the membership rules for groups.

    For example, if you access the properties of a global group, you are not going to see the trusted forest as an option since global groups can only contain members from the same domain.


    anITKB Visit, an IT Knowledge Base.
    facebook Follow me on Facebook.
    Thursday, July 21, 2011 11:00 PM
  • Your is a "group" thing.  Only domain local security groups will display the other forest\domain and allow me to add a user from the other forest\domain.  However, global and universal security groups do not even display the trusted domain, and just typing in the domain\username won't work either.  Is this the way it should work?

    thanks for your help

    Friday, July 22, 2011 8:25 PM
  • I am not following your last two sentences...

    Can you provide more details as to what you are exactly trying to do?  Are you trying to add/modify group membership?  Or are you trying to add permissions to an NTFS resource?  Domain A/B?

    anITKB Visit, an IT Knowledge Base.
    facebook Follow me on Facebook.
    Friday, July 22, 2011 8:46 PM
  • hello,


    I am trying to add/modify group membership.  I am trying to add a user from domain B to a universal security group in domain A.





    Friday, July 22, 2011 10:07 PM
  • Hello,

    see here about the Group scopes and how to handle it:

    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    Saturday, July 23, 2011 10:55 AM