Home / server / Questions / 57929
Accepted
Dan
Asked: 2009-08-25 05:25:52 +0800 CST

Active Directory cross forest group enumeration

  • 772

I have 2 active directory forests, each containing at least one domain but in both cases I am dealing with the top level domain.

I have a group on each domain, group1 (domain A) group2 (domain B). group1 in domain A has the group2 (from domain B) as a member.

Is it possible using "Active Directory Users and Computers" from a domain A member to enumerate the members of group2 from domain B. At present it only appears as an object in group1 and I can see what it is a member of but not the members contained in it.

Is this possible or must you enumerate the object via a domain member in domain B?

windows-server-2003

1 Answers

  1. Best Answer

    WINS was required in the domain to enumerate this, the console was trying to enumerate it via TESTDOMAIN1\Group2. Once WINS was installed the members were available.

    • 0