That's great. Thanks Steve.
:-) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Linehan Sent: Tuesday, 23 August 2005 5:21 p.m. To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Cross forest trust: universal groups The documentation is
wrong and I thought it had been cleaned up in all places but apparently not.
A good summary of group scope for cross forest trusts
is: Scenario: Thanks, -Steve From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Tony
Murray Thanks
Dean That makes absolute
sense....only it conflicts with what is says here: "Create a
universal group in the resource forest, and then add all global groups from the
other forest (or forests) that need similar access as members of the universal
group. For example, both the
employees in the Sales Department and Accounting Department global groups
located in ForestA use similar print resources located in ForestB. Create a
universal group called Print Users in Other Forests in ForestB, and add both the
Sales Department and Accounting Department global groups from ForestA as
members. Universal groups are
used primarily to group together two or more global groups (possibly from other
forests) into one group for the resource domain." Tony From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Dean
Wells A user's Universal
group membership must be able to be fully enumerated against a forest-local GC,
thus you cannot add users to a Universal beyond their own
forest. -- From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Tony
Murray Hi
all I'm missing something here and I'm
hoping you can give me a pointer. Scenario: 2 single domain forests connected by
a forest trust. I want to add global groups from
ForestB to a universal group in ForestA. I go into ADUC in ForestA and
click on the Members tab and select Add. When I go to the Locations tab to
select the domain from ForestB I only see ForestA as an available option.
Surely I should be able to add resources from ForestB to this universal
group? If I try to do the same thing with a domain local group in ForestA,
I see the the domain in ForestB as an available option, so it looks like the
trust is ok. Any
thoughts? Tony This e-mail message has been scanned for Viruses and
Content and cleared by NetIQ MailMarshal
at Gen-i
Limited
This e-mail message has been scanned for Viruses and Content and cleared by NetIQ MailMarshal at Gen-i Limited |
- RE: [ActiveDir] Cross forest trust: universal groups Tony Murray
- RE: [ActiveDir] Cross forest trust: universal groups Steve Linehan
- RE: [ActiveDir] Cross forest trust: universal groups Tony Murray
- RE: [ActiveDir] Cross forest trust: universal groups Dale, Rick