Hmm, try that, setup a trust between the two domains, and then add the user to domain admin group of the child domain.
I'm going to try to set something up here to mimic your config and see what I can do. -----Original Message----- From: Dana [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 13, 2005 9:14 PM To: CF-Community Subject: Re: one more time - universal groups no On 7/13/05, Nick McClure <[EMAIL PROTECTED]> wrote: > Do you have a trust relationship setup between foo.com and > child.foo.com? > > > -----Original Message----- > From: Dana [mailto:[EMAIL PROTECTED] > Sent: Wednesday, July 13, 2005 6:15 PM > To: CF-Community > Subject: Re: one more time - universal groups > > I tried that and got a replication error. Possibly a Virtual PC > problem. I asked the prof and was told that I should know that Domain > Admins are a local group and therefore this won't work. However he is > frequently confused as to the question, giving a confusing answer. > When I look at the documentation it says that changes to a local group > only replicate to the local server, but ... > > The actual task is - make X, a user on the foo.com domain (who is not > an enterprise admin) a domain admin on the child.foo.com domain. > > any light you can shed would be appreciated. > > Dana > > On 7/13/05, Nick McClure <[EMAIL PROTECTED]> wrote: > > Well, IIRC Enterprise Admin is by default a member of the Domain Admin > group > > of all the sub-domains. > > > > So if the user was a member of the Enterprise Admin group, then you > wouldn't > > need to create the other group. > > > > IF the end result is to have a single user in domain "X.COM" to be a > domain > > admin in "FOO.X.COM" then you should just add this person to the > Domain > > Admin group of "FOO.X.COM" > > > > I guess it is a question of what the end result should be. I try not > to make > > groups that will only ever hold one person, with Active Directory you > > shouldn't need to do that. > > > > > -----Original Message----- > > > From: Dana [mailto:[EMAIL PROTECTED] > > > Sent: Wednesday, July 13, 2005 5:52 PM > > > To: CF-Community > > > Subject: Re: one more time - universal groups > > > > > > this is not quite a real world question, it's a lab question. I just > > > looked and it seems that you get an Enterprise Admins by default, so > > > yes, there would be. Are you making the point that ths would be a > > > better way to do this? > > > > > > Dana > > > > > > On 7/13/05, Nick McClure <[EMAIL PROTECTED]> wrote: > > > > Yes, that should work, tho I've never tried it, and I don't know > how it > > > will > > > > function in the real world. > > > > > > > > Is there an Enterprise Admin group? > > > > > > > > > -----Original Message----- > > > > > From: Dana [mailto:[EMAIL PROTECTED] > > > > > Sent: Wednesday, July 13, 2005 5:35 PM > > > > > To: CF-Community > > > > > Subject: Re: one more time - universal groups > > > > > > > > > > so if I have a user on a parent domain and want to make him a > domain > > > > > admin on the child domain I should be able to make him a member > of a > > > > > universal group and make the universal group a member of domain > > > > > admins? > > > > > > > > > > Dana > > > > > > > > > > On 7/13/05, Nick McClure <[EMAIL PROTECTED]> wrote: > > > > > > Should be able to. > > > > > > > > > > > > > -----Original Message----- > > > > > > > From: Dana [mailto:[EMAIL PROTECTED] > > > > > > > Sent: Wednesday, July 13, 2005 5:28 PM > > > > > > > To: CF-Community > > > > > > > Subject: one more time - universal groups > > > > > > > > > > > > > > nobody here can tell me if a universal group can be made a > member > > > of a > > > > > > > local group in Active Directory? > > > > > > > > > > > > > > -- > > > > > > > Nobody's laughing now > > > > > > > But you could always make me laugh out loud > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Discover CFTicket - The leading ColdFusion Help Desk and Trouble Ticket application http://www.houseoffusion.com/banners/view.cfm?bannerid=48 Message: http://www.houseoffusion.com/lists.cfm/link=i:5:164703 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/5 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:5 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.5 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
