Group Membership in Multi-Forest Scenarios
Clearing up uncertainty around some Microsoft documentation on how groups can be nested.
If your organization has deployed Active Directory in a multi-forest scenario (for example through a merger or acquisition with another company) and you need to add users or groups in one forest to a group in the other forest, the group in the other forest must be a domain local group. You might thing from reading the Microsoft documentation at http://msdn2.microsoft.com/en-us/library/ms677609.aspx that you could also use universal groups for this purpose since it says there that “A universal group can contain other universal groups, global groups and accounts from any domain in any forest”. However, this is incorrect—universal groups can only contain users or groups from the same forest, not from different forests.
Article written by MyComputerAid.com
2003 server - Sep 30, 2008 22:34 - 0 Comments
instant messaging srv records
More In Computers & PC
- Howto secure wordpress
- Simple wordpress upgrade from SSH howto
- permanently delete your facebook account
- Creating a Sound File
- Talking to the Mouse
Microsoft Outlook - Mar 22, 2009 11:22 - 0 Comments
Outlook: Duplicates in Mailbox
More In Computers & PC
- Howto secure wordpress
- Simple wordpress upgrade from SSH howto
- permanently delete your facebook account
- Creating a Sound File
- Talking to the Mouse
Microsoft Desktop, Web browsers and Internet, Windows 2000, Windows 7, Windows 98, Windows Firewall and networking, Windows Vista, Windows XP - Feb 8, 2010 18:09 - 0 Comments
Disable Proxy settings in IE
More In Computers & PC
- Howto secure wordpress
- Simple wordpress upgrade from SSH howto
- permanently delete your facebook account
- Creating a Sound File
- Talking to the Mouse
Leave a Reply
You must be logged in to post a comment.