[ActiveDir] Create Trusted Domain Object permission

[Manjeet Singh]

Hi,   I have two windows 2003 forest and one of my forests is in mixed mode environment.   I want to create a trust relationship from one domain controller in one forest to the entire domain controller in other forest.   I know that transitive trust will only work in Native when both forests are in native mode. I can not raise the level of my second forest.   Now I want to create a user in the second forest with Create Trusted domain object permission so that I can create the trust between two forest using that users.   My problem is that that permission are not working in windows 2003. I have tested this permission in windows 2000 some time back, and it was working.     Any body has an idea, has Microsoft changed something with this permission???     Or any other way, so that I by giving the minimum rights to a user just for creation of trust….     Thanks, Manjeet