The "Domain Admins" group is an auto-created Global Group. Its members must be of an equal or lesser scope, so it can only hold Local or Global objects (users, groups, computers, etc).
IIF the group in question is a Universal Group can it hold members of an outside domain, be it parent, child, or sibling. The way I wrote that last post may have been a bit confusing. So in one of my test domains "primates.local" I created a child domain called "foo.primates.local" Universal Groups from both domains get replicated out to the Global Catalog. For primates.local to be able to see an object in the foo.primates.local domain it must be in the global catalog. One of the problems with all of this is that is still a bit confusing to me, so as I try to explain it, I'm also trying to understand it too. I hope I'm not confusion us both even more :) -----Original Message----- From: Dana [mailto:[EMAIL PROTECTED] Sent: Thursday, July 14, 2005 9:59 PM To: CF-Community Subject: Re: one more time - universal groups ummmmmm ok so why couldn't you make that user a domain admin again? Sorry if I sem stupid but it just is not sinking in. Dana On 7/14/05, Nick McClure <[EMAIL PROTECTED]> wrote: > You can nest in any group so long as is a equal or lesser scope. > > Builtin Local is an exception, you can nest any level into a Builtin > Local group. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Find out how CFTicket can increase your company's customer support efficiency by 100% http://www.houseoffusion.com/banners/view.cfm?bannerid=49 Message: http://www.houseoffusion.com/lists.cfm/link=i:5:164883 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/5 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:5 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.5 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
