OK, so here is what I learned. The Domain Admins group is a Global Group, for some reason I thought it was a Universal Group. A global group is only able to see the local domain, it is able to see all objects in the local domain, but only the local domain.
Now, the other thing I was playing with, why does the user have to be a member of the Domain Admins group? Why not just make them a member of the Administrators Group? The Domain Admins group is just a global group, therefore it cannot see Universal Groups, nor can it see people outside its domain. One thing I tried was to use the command prompt to change the Group Type of the Domain Admin group to Universal, however that didn't work. The next thing I did was I renamed Domain Admins to Domain Admins2, Created a new group called Domain Admins, set it to Universal, added that group to the Builin/Administrators group, then added the user from the parent domain. > -----Original Message----- > From: Dana [mailto:[EMAIL PROTECTED] > Sent: Wednesday, July 13, 2005 9:30 PM > To: CF-Community > Subject: Re: one more time - universal groups > > thanks :) > > Dana > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Get Instant Hacker Protection, Virus Detection, Antispam & Personal Firewall. http://www.houseoffusion.com/banners/view.cfm?bannerid=62 Message: http://www.houseoffusion.com/lists.cfm/link=i:5:164726 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/5 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:5 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.5 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
