How Do I Put a Foreign Account in a Domain Global Group?

[Guest Chris Allen]

I formed a trust relationship between two domains (domain01.com,

domain02.com). There is a global group defined on domain01 that is

critical to the operation of a SQL database. In order to use the

database users much be in the global group called "pfgusers". The new

domain (domain02) needs to access this database and needs to have it's

users placed in the "pfgusers" group. The problem is that you can't

add foreign accounts to a global group, but I have to do this... I

don't feel safe mucking around with security settings that have to do

with this proprietry database system.

 

How can I get my foreign users into this group? I don't want to

delete and recreate the group as a local group because I'm afraid of

breaking my database as I know the new group won't have the same SID.

I tried creating a local group on domain01 and adding it to "pfgusers"

but it won't allow me to do this.

 

I also can't create the pfgusers group on domain02, the database

system won't work with this. Any ideas? Thanks.

[Guest net_admin]

RE: How Do I Put a Foreign Account in a Domain Global Group?

 

Depending on your domain mode you can/can not do some kind of nesting.

Check this:

http://technet2.microsoft.com/windowsserver/en/library/79d93e46-ecab-4165-8001-7adc3c9f804e1033.mspx?mfr=true

 

--

NetAdmin <São Paulo, BR>

"Das ist nicht mein bier... arschloch."