universal group membership

[big40]

Hi

we have a root domain with 6 child domains.

If i go into active directory, click on a user and click on the member of tab, and then click the add button it only shows the groups from the local domain. the domain list box is greyed out. I can't make the user of a group from a different domain.

However I can click on a universal group, members, add, and it does show the list of domains. I can add a user from a different domain to a universal group using this method.

anybody any ideas why the first method does not work ?

Thanks

Gary

 

[markdmac]

You should be able to open up an MMC console and point it to the target domain. From within there you can open the group and choose to add the user from the trusted domain.

I hope you find this post helpful.

Regards,

Mark

 

[big40]

thanks for your reply mark.

but should I be able to add the user to a group from a different domain from within its own domain ?

i don't think i should have to connect to the target domain first .

 

[markdmac]

I don't believe so (from within your domain).

I believe you can do it however if you use the Connect to option in the snap in and connect to a DC in the other Domain.

I hope you find this post helpful.

Regards,

Mark

 

[big40]

ok mark, thanks for your reply

Gary

 

[JimWells]

I think the issue is that you have to open the GROUP to add members; I don't think you can work this way with Univeral (or even Global sometimes) groups from a User object's properties.

 

[markdmac]

I add Global Groups from the user side all the time (though not accross trusts), so I know that works.

I hope you find this post helpful.

Regards,

Mark