First of all, I'd like to point out that this question is purely theoretical. I'm asking it to better understand the nature of different groups in Active Directory.
So, I have created two separate Active Directory forests, say forest A and forest B. Moreover, I manually created a two-way transitive forest trust between them. Now, I want to try one more thing: Allow any enterprise admin in forest A to perform any administrative task in forest B.
To do so, I thought of adding the "Enterprise Admins" group of forest A to "Enterprise Admins" group of forest B. This is impossible, since the "Enterprise Admins" group can only have members within the same forest.
Next, I tried to add an intermediate group to forest B. The idea is:
"Enterprise Admins" of A ==> Intermediate group ==> "Enterprise Admins" of B
However, the only group which can host members of other forests is a "local group," which cannot be a member of any other type of groups.
So, I'm stuck here. Is it possible to achieve this task?