RE: [ActiveDir] Cross Domain Groups

2004-12-06 Thread Cothern Jeff D. Team EITC
administrators "your group" /ADD           From: Brian Desmond [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond Sent: Wednesday, December 01, 2004 9:13 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Cross Domain Groups   I do this on all my machines with a group from

RE: [ActiveDir] Cross Domain Groups

2004-12-01 Thread Brian Desmond
I do this on all my machines with a group from a trusted domain. Check out the restricted groups feature in group policy. --Brian Desmond [EMAIL PROTECTED] Payton on the web! www.wpcp.org v - 773.534.0034 x135 f - 773.534.8101 From: [EMAIL PROTECTED] on beha

RE: [ActiveDir] Cross Domain Groups

2004-12-01 Thread joe
You should be able to directly add the trusted domain's domain admins group to any workstations you want. As long as the trust lines are there the global groups will nest fine in the workstations builtin administrators group. Ex: G:\TEMP\schema>lg administrators LG V01.01.00cpp Joe Richards ([E

RE: [ActiveDir] Cross Domain Groups

2004-12-01 Thread Glenn Corbett
Can't you use the "Restricted Groups" policy setting to set your local Admin membership on your workstations ? We do this routinely for about 2500 workstations and 300+ servers with no problems. MS Article on it (not a huge amount of help though) http://support.microsoft.com/default.aspx?scid=kb;