I have a Top level domain controller (DC1) running the top level forest on my network. I added a Tree Domain Controller (TDC1) as a new domain in the forest. I am trying to add ENTERPRISE ADMINS to the new Tree in Active Directory. So essentially those in the ENTERPRISE ADMINS group for the forest on DC1 are also admins on TDC1. When I try to add the group or a group from it from DC1 to TDC1 it does not allow me to select another domain to pull the group.
Is it possible to make the ENTERPRISE ADMINS, domain admins on the Tree domain or do I have to remake users are that domain to allow them to login to that domain? Or can I make a group on the forest level DC1 and add that group to the TDC1 domain as permissions require?
All Servers running Windows Server 2016.
EDIT Tree domain as shown here in the Server 2016 Configuration Manager section when adding a Domain to a Forest. So I am adding a domain to the forest. In my Active Directory Administrative Center client I can add both domains to it to manage them both from DC1. So what I have a the DC1 domain which is an area for office work. And a TDC1 domain which is a test lab and security and management is run from the DC1. I guess I am wondering since on the DC1 domain I added an admin group to ENTERPRISE DOMAINS is that group admin on the TDC1?
The networks are not connected to each other other than the 2 DCs connected to each other. So logins from DC1 domain users will not work on TDC1 computers.