Windows permissions for users on same computer, different domains

Question

I have a local user DOMAIN_ONE\me and another user DOMAIN_TWO\me . I wanted to make the user on DOMAIN_TWO\me an admin on this computer, but I'm not sure how to do this.

Any idea how I can make DOMAIN_TWO\me an admin for this computer (like DOMAIN_ONE\me?)

Answer 1

So as I understand it, you have created a one-way Windows trust so that DOMAIN ONE trusts DOMAIN TWO. Given this, you should be able to assign permissions in DOMAIN ONE to objects in DOMAIN TWO.

To make DOMAIN TWO\me an admin on a computer in DOMAIN ONE, do this on the computer (assuming the computer is running Windows 2008, the procedure is very similar on 2003):

1. Launch Server Manager from Start/Administrative Tools.
2. Expand Configuration. Expand Local Users and Groups. Click on Groups.
3. Double-click on the Administrators group.
4. Click Add.
5. The 'Select Users, Computers, or Groups' dialog box will open. Click on the Locations button.
6. Select DOMAIN TWO from the list of locations and click OK.
7. Enter the username of the user account in DOMAIN TWO (ie me) and click the Check Names button to make sure that name resolves properly to the right object. Click OK and then click OK again to close the Administrators group.

Given your first comment above about not being familiar with trusts, my guess is you just haven't ever used the Location button mentioned above but that's how you tell Windows you want to select users or groups from another domain so hopefully that helps?