Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have 2 active directory forests, each containing at least one domain but in both cases I am dealing with the top level domain.

I have a group on each domain, group1 (domain A) group2 (domain B). group1 in domain A has the group2 (from domain B) as a member.

Is it possible using "Active Directory Users and Computers" from a domain A member to enumerate the members of group2 from domain B. At present it only appears as an object in group1 and I can see what it is a member of but not the members contained in it.

Is this possible or must you enumerate the object via a domain member in domain B?

share|improve this question

1 Answer 1

up vote 0 down vote accepted

WINS was required in the domain to enumerate this, the console was trying to enumerate it via TESTDOMAIN1\Group2. Once WINS was installed the members were available.

share|improve this answer
    
WINS? This can't be the correct solution, are you sure that the DNS servers in each domain have been correctly configured to query the other domain's DNS servers with a filter? –  pauska Aug 26 '09 at 11:11
    
I believe that it was due to using the NETBIOS value rather than the FQDN for the domain. The only action was to install WINS and this solved the problem! Whether it is the "correct" solution is an exercise left to the reader :) –  Dan Aug 26 '09 at 13:58

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.