OK, so here is what I am setting up. I have a Virtual Server with two Domain Controllers for the primates.local domain. I'm currently installing AD on a third server calling it foo.primates.local
-----Original Message----- From: Dana [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 13, 2005 9:30 PM To: CF-Community Subject: Re: one more time - universal groups thanks :) Dana On 7/13/05, Nick McClure <[EMAIL PROTECTED]> wrote: > Hmm, try that, setup a trust between the two domains, and then add the > user to domain admin group of the child domain. > > I'm going to try to set something up here to mimic your config and see > what I can do. > > -----Original Message----- > From: Dana [mailto:[EMAIL PROTECTED] > Sent: Wednesday, July 13, 2005 9:14 PM > To: CF-Community > Subject: Re: one more time - universal groups > > no > > On 7/13/05, Nick McClure <[EMAIL PROTECTED]> wrote: > > Do you have a trust relationship setup between foo.com and > > child.foo.com? > > > > > > -----Original Message----- > > From: Dana [mailto:[EMAIL PROTECTED] > > Sent: Wednesday, July 13, 2005 6:15 PM > > To: CF-Community > > Subject: Re: one more time - universal groups > > > > I tried that and got a replication error. Possibly a Virtual PC > > problem. I asked the prof and was told that I should know that Domain > > Admins are a local group and therefore this won't work. However he is > > frequently confused as to the question, giving a confusing answer. > > When I look at the documentation it says that changes to a local group > > only replicate to the local server, but ... > > > > The actual task is - make X, a user on the foo.com domain (who is not > > an enterprise admin) a domain admin on the child.foo.com domain. > > > > any light you can shed would be appreciated. > > > > Dana > > > > On 7/13/05, Nick McClure <[EMAIL PROTECTED]> wrote: > > > Well, IIRC Enterprise Admin is by default a member of the Domain > Admin > > group > > > of all the sub-domains. > > > > > > So if the user was a member of the Enterprise Admin group, then you > > wouldn't > > > need to create the other group. > > > > > > IF the end result is to have a single user in domain "X.COM" to be a > > domain > > > admin in "FOO.X.COM" then you should just add this person to the > > Domain > > > Admin group of "FOO.X.COM" > > > > > > I guess it is a question of what the end result should be. I try not > > to make > > > groups that will only ever hold one person, with Active Directory > you > > > shouldn't need to do that. > > > > > > > -----Original Message----- > > > > From: Dana [mailto:[EMAIL PROTECTED] > > > > Sent: Wednesday, July 13, 2005 5:52 PM > > > > To: CF-Community > > > > Subject: Re: one more time - universal groups > > > > > > > > this is not quite a real world question, it's a lab question. I > just > > > > looked and it seems that you get an Enterprise Admins by default, > so > > > > yes, there would be. Are you making the point that ths would be a > > > > better way to do this? > > > > > > > > Dana > > > > > > > > On 7/13/05, Nick McClure <[EMAIL PROTECTED]> wrote: > > > > > Yes, that should work, tho I've never tried it, and I don't know > > how it > > > > will > > > > > function in the real world. > > > > > > > > > > Is there an Enterprise Admin group? > > > > > > > > > > > -----Original Message----- > > > > > > From: Dana [mailto:[EMAIL PROTECTED] > > > > > > Sent: Wednesday, July 13, 2005 5:35 PM > > > > > > To: CF-Community > > > > > > Subject: Re: one more time - universal groups > > > > > > > > > > > > so if I have a user on a parent domain and want to make him a > > domain > > > > > > admin on the child domain I should be able to make him a > member > > of a > > > > > > universal group and make the universal group a member of > domain > > > > > > admins? > > > > > > > > > > > > Dana > > > > > > > > > > > > On 7/13/05, Nick McClure <[EMAIL PROTECTED]> wrote: > > > > > > > Should be able to. > > > > > > > > > > > > > > > -----Original Message----- > > > > > > > > From: Dana [mailto:[EMAIL PROTECTED] > > > > > > > > Sent: Wednesday, July 13, 2005 5:28 PM > > > > > > > > To: CF-Community > > > > > > > > Subject: one more time - universal groups > > > > > > > > > > > > > > > > nobody here can tell me if a universal group can be made a > > member > > > > of a > > > > > > > > local group in Active Directory? > > > > > > > > > > > > > > > > -- > > > > > > > > Nobody's laughing now > > > > > > > > But you could always make me laugh out loud > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Find out how CFTicket can increase your company's customer support efficiency by 100% http://www.houseoffusion.com/banners/view.cfm?bannerid=49 Message: http://www.houseoffusion.com/lists.cfm/link=i:5:164709 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/5 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:5 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.5 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
