Add domain admins through trusted Domains

[madmarco]

Hi all

I've got following situation. On the left side i've got windows 2000 mixed Mode Domain asdf.com and on the right native mode domain qwertz.com. With ADMT I want to clone all the user objects and groups from asdf.com to qwertz.com. The Domain Migration Cookbook from Microsoft tells me in chapter 4: "The user carrying out the migrations must have membership of the Domain Admins group in the target domain to clone.". So I tried to add the Administrator Account or the Domain Admins group from asdf to add to the Domain Admins Group in qwertz. But that didn't work because the Domain Admins group is a global group and you can't add accounts from other domains to a gloabl group. I've created a domain local group on qwertz, and was able to add the Domain Admins Group from asdf into it, but it's not possible to let this domain local group be a member of the global group.

Does anyone have a good idea how to solve this issue? Thank you in advance

 

[brontosaurus]

add Domain Admins from one domain to the Built-in Administrators group on the other domain.