Do you have a trust relationship setup between foo.com and child.foo.com?
-----Original Message----- From: Dana [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 13, 2005 6:15 PM To: CF-Community Subject: Re: one more time - universal groups I tried that and got a replication error. Possibly a Virtual PC problem. I asked the prof and was told that I should know that Domain Admins are a local group and therefore this won't work. However he is frequently confused as to the question, giving a confusing answer. When I look at the documentation it says that changes to a local group only replicate to the local server, but ... The actual task is - make X, a user on the foo.com domain (who is not an enterprise admin) a domain admin on the child.foo.com domain. any light you can shed would be appreciated. Dana On 7/13/05, Nick McClure <[EMAIL PROTECTED]> wrote: > Well, IIRC Enterprise Admin is by default a member of the Domain Admin group > of all the sub-domains. > > So if the user was a member of the Enterprise Admin group, then you wouldn't > need to create the other group. > > IF the end result is to have a single user in domain "X.COM" to be a domain > admin in "FOO.X.COM" then you should just add this person to the Domain > Admin group of "FOO.X.COM" > > I guess it is a question of what the end result should be. I try not to make > groups that will only ever hold one person, with Active Directory you > shouldn't need to do that. > > > -----Original Message----- > > From: Dana [mailto:[EMAIL PROTECTED] > > Sent: Wednesday, July 13, 2005 5:52 PM > > To: CF-Community > > Subject: Re: one more time - universal groups > > > > this is not quite a real world question, it's a lab question. I just > > looked and it seems that you get an Enterprise Admins by default, so > > yes, there would be. Are you making the point that ths would be a > > better way to do this? > > > > Dana > > > > On 7/13/05, Nick McClure <[EMAIL PROTECTED]> wrote: > > > Yes, that should work, tho I've never tried it, and I don't know how it > > will > > > function in the real world. > > > > > > Is there an Enterprise Admin group? > > > > > > > -----Original Message----- > > > > From: Dana [mailto:[EMAIL PROTECTED] > > > > Sent: Wednesday, July 13, 2005 5:35 PM > > > > To: CF-Community > > > > Subject: Re: one more time - universal groups > > > > > > > > so if I have a user on a parent domain and want to make him a domain > > > > admin on the child domain I should be able to make him a member of a > > > > universal group and make the universal group a member of domain > > > > admins? > > > > > > > > Dana > > > > > > > > On 7/13/05, Nick McClure <[EMAIL PROTECTED]> wrote: > > > > > Should be able to. > > > > > > > > > > > -----Original Message----- > > > > > > From: Dana [mailto:[EMAIL PROTECTED] > > > > > > Sent: Wednesday, July 13, 2005 5:28 PM > > > > > > To: CF-Community > > > > > > Subject: one more time - universal groups > > > > > > > > > > > > nobody here can tell me if a universal group can be made a member > > of a > > > > > > local group in Active Directory? > > > > > > > > > > > > -- > > > > > > Nobody's laughing now > > > > > > But you could always make me laugh out loud > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Find out how CFTicket can increase your company's customer support efficiency by 100% http://www.houseoffusion.com/banners/view.cfm?bannerid=49 Message: http://www.houseoffusion.com/lists.cfm/link=i:5:164699 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/5 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:5 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.5 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
