Forest Trust Relationship

20 Oct 2006 5:00 PM

Andy

I am trying to create a Forest Trust Relationship and need some help. I have
followed MSs checklist by configuring DNS with a forwarder, both systems are
that the 2003 Forest and Domain level. When I create the two-way trust it
works to the point that I can map a drive to a share on the other forest, but
when I try to manage a group and add a person from the other forest/domain to
that group, the location button doesn't lest the other domai. I cannot even
type the full path and have it work.

I've used utilities to indicate that the trust is in place and I can even
set a permission on a file or folder from either domains users, but when I
try to add a user any of the others groups, it will not allow me to.

Thanks for any help.

20 Oct 2006 7:15 PM

T. Uranjek

Hi!

Will you please tell me which type of group are you using (DL, G, U)?
I believe, you should use DL group.

HTH

Toni

Show quoteHide quote

"Andy" <A***@discussions.microsoft.com> wrote in message
news:3EC97926-8AA1-4459-A2D6-0AE93211F533@microsoft.com...
>I am trying to create a Forest Trust Relationship and need some help. I
>have
> followed MSs checklist by configuring DNS with a forwarder, both systems
> are
> that the 2003 Forest and Domain level. When I create the two-way trust it
> works to the point that I can map a drive to a share on the other forest,
> but
> when I try to manage a group and add a person from the other forest/domain
> to
> that group, the location button doesn't lest the other domai. I cannot
> even
> type the full path and have it work.
>
> I've used utilities to indicate that the trust is in place and I can even
> set a permission on a file or folder from either domains users, but when I
> try to add a user any of the others groups, it will not allow me to.
>
> Thanks for any help.

23 Oct 2006 12:08 PM

Andy

I was trying to add it as a global security group. I see that the other
responder said that it needs to be a local group. I will try that if I do
not receive a response. Thanks

Show quoteHide quote

"T. Uranjek" wrote:

> Hi!
>
> Will you please tell me which type of group are you using (DL, G, U)?
> I believe, you should use DL group.
>
> HTH
>
> Toni
>
> "Andy" <A***@discussions.microsoft.com> wrote in message
> news:3EC97926-8AA1-4459-A2D6-0AE93211F533@microsoft.com...
> >I am trying to create a Forest Trust Relationship and need some help. I
> >have
> > followed MSs checklist by configuring DNS with a forwarder, both systems
> > are
> > that the 2003 Forest and Domain level. When I create the two-way trust it
> > works to the point that I can map a drive to a share on the other forest,
> > but
> > when I try to manage a group and add a person from the other forest/domain
> > to
> > that group, the location button doesn't lest the other domai. I cannot
> > even
> > type the full path and have it work.
> >
> > I've used utilities to indicate that the trust is in place and I can even
> > set a permission on a file or folder from either domains users, but when I
> > try to add a user any of the others groups, it will not allow me to.
> >
> > Thanks for any help.
>
>
>

23 Oct 2006 1:00 PM

T. Uranjek

Hi!

We both suggested using Domain Local groups in you case. Global Group can
only contain Users (or other Global Groups, when your domain is DFL2000 or
DFL2003) from same domain. Universal Groups should only contain Global
Groups from same forest.

HTH

Toni

Show quoteHide quote

"Andy" <A***@discussions.microsoft.com> wrote in message
news:B901ADCC-5301-4BFA-8BBB-D4719CC3A02B@microsoft.com...
>I was trying to add it as a global security group. I see that the other
> responder said that it needs to be a local group. I will try that if I do
> not receive a response. Thanks
>
> "T. Uranjek" wrote:
>
>> Hi!
>>
>> Will you please tell me which type of group are you using (DL, G, U)?
>> I believe, you should use DL group.
>>
>> HTH
>>
>> Toni
>>
>> "Andy" <A***@discussions.microsoft.com> wrote in message
>> news:3EC97926-8AA1-4459-A2D6-0AE93211F533@microsoft.com...
>> >I am trying to create a Forest Trust Relationship and need some help. I
>> >have
>> > followed MSs checklist by configuring DNS with a forwarder, both
>> > systems
>> > are
>> > that the 2003 Forest and Domain level. When I create the two-way trust
>> > it
>> > works to the point that I can map a drive to a share on the other
>> > forest,
>> > but
>> > when I try to manage a group and add a person from the other
>> > forest/domain
>> > to
>> > that group, the location button doesn't lest the other domai. I cannot
>> > even
>> > type the full path and have it work.
>> >
>> > I've used utilities to indicate that the trust is in place and I can
>> > even
>> > set a permission on a file or folder from either domains users, but
>> > when I
>> > try to add a user any of the others groups, it will not allow me to.
>> >
>> > Thanks for any help.
>>
>>
>>

20 Oct 2006 7:16 PM

acchong

You need to make sure that the security group that you trying to add
the user/group from the other domain is a domain local group. You will
not be able to add user/group from the other domain to a global group.

On Oct 21, 1:00 am, Andy <A***@discussions.microsoft.com> wrote:
Show quoteHide quote

> I am trying to create a Forest Trust Relationship and need some help. I have
> followed MSs checklist by configuring DNS with a forwarder, both systems are
> that the 2003 Forest and Domain level. When I create the two-way trust it
> works to the point that I can map a drive to a share on the other forest, but
> when I try to manage a group and add a person from the other forest/domain to
> that group, the location button doesn't lest the other domai. I cannot even
> type the full path and have it work.
>
> I've used utilities to indicate that the trust is in place and I can even
> set a permission on a file or folder from either domains users, but when I
> try to add a user any of the others groups, it will not allow me to.
>
> Thanks for any help.