Trust between AD forests problem

[malfster]

Hi all,

We have a W2k/NT mixed mode environment. I need to restore an Exchange 2000 mailbox so i'm following the official Microsoft path of installing a recovery server which is a new Exchange 2000 server in a new AD forest. I then plan to restore using Backup Exec 8.6 in our live forest accross to our recovery forest. I've set up forest trusts both ways which seems to have worked fine, I can browse and access resources across the forest trusts both ways.

However one of the things I need to do is add my Backup Exec admin account on our live forest to the Domain Admins group on our restore forest. If I open Domain Admins wsing AD for Users and Computers in the test forest, go to "Members" and then click "Add" I can't browse our other forest for the Backup Exec Admin account. If I click "Add" from "Member of" I can browse our other forest but can't add the group to any other groups.

I can however set NTFS permissions from accounts across the forest trust, and also delegate control - both ways. Can anyone tell me what i'm doing wrong?

Thanks, in anticipation.

Alastair

 

[malfster]

Just sorted this if anyone's interested - didn't realise that the only groups you can add accounts from another forest to are the builtin ones - of course the Administrators one does the job very nicely for me.