I have 2 active directory forests, each containing at least one domain but in both cases I am dealing with the top level domain.

I have a group on each domain, group1 (domain A) group2 (domain B). group1 in domain A has the group2 (from domain B) as a member.

Is it possible using "Active Directory Users and Computers" from a domain A member to enumerate the members of group2 from domain B. At present it only appears as an object in group1 and I can see what it is a member of but not the members contained in it.

Is this possible or must you enumerate the object via a domain member in domain B?

1 Answer 1


WINS was required in the domain to enumerate this, the console was trying to enumerate it via TESTDOMAIN1\Group2. Once WINS was installed the members were available.

  • WINS? This can't be the correct solution, are you sure that the DNS servers in each domain have been correctly configured to query the other domain's DNS servers with a filter?
    – pauska
    Aug 26, 2009 at 11:11
  • I believe that it was due to using the NETBIOS value rather than the FQDN for the domain. The only action was to install WINS and this solved the problem! Whether it is the "correct" solution is an exercise left to the reader :)
    – Dan
    Aug 26, 2009 at 13:58

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.