Windows Server

Juneday · Guest

At my company we have a 2003 domain setup with three domains
1. Root domain (Only Net Admins are in this domain)
2. Operations Domain
3. Is for Remote sites

There is currently a trust setup between them 1 is the parent and 2 & 3 are
child domains 2 & 3 have shortcut trusts between them the problem is that I
have to have a different login for each domain that I want to administer so
if I am in 2 and want to manage something in 3 it will not let me do it. Any
help would be appreciated.

Moreno · Guest

Juneday,

1) if you are in a W2003 Environment and domains 2+3 are CHILD domains of 1,
these domains are AUTOMATICALLY in bi-directional TRUST RELATIONSHIP with 1;

2) what do you mean with "...shortcut TRUST" between 2 & 3???
If you are in a W2003 environment, so if domain 2 is a child domain of 1 and
domain 3 is also a child domain of 1, then thanks to the bi-directional
trust of each domain with domain 1 the result is that domain 2 is also in
trust with domain 3....

Can you give a more detailed description of your environment?

Bye.

Moreno
(Italy)

"Juneday" <Juneday@discussions.microsoft.com> ha scritto nel messaggio
news:354CB5B9-7571-49FB-8245-B9621D2A4AC7@microsoft.com...

Juneday · Guest

This is how we are setup we have a root domain and two subdomains. Here is
the problem we are in one domain as admins and when we try to administer
anything in the other domains we dont have priveleges unless we actually have
an admin account for that domain. Meaning we have to have 3 domain admin
accounts for our infrastructure when we would like to have just one domain
account.

"Moreno" wrote:

Frances [MSFT] · Guest

Hello,

Good to hear from you.

According to your message, it seems that your main concern is to have one
account to administer three domains. Is this correct? To achieve your goal,
I suggest that you add the admin account into the admin groups in domain 1,
domain 2 and domain 3. Or you can add the admin account into the Enterprise
Admins Group in the root domain. Because Enterprise Admins are designed to
administer the root domain and the child domains.

Generally speaking, domains which have parent-child relations are trusted
automatically. If you want to administer domain 3 when you logon in domain
2, you can manually add your account in domain 3 as an admin account. Only
in this way can you administer domain 3.

Please refer to the following article for more information.

Trust direction
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/p
roddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/stan
dard/proddocs/en-us/sag_ad_untrusts.asp

Hope this helps. If you have any further questions don't hesitate to get in
touch!

Best regards,

Frances He

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

	Windows Server Forum Index -> Migration	All times are GMT
Page 1 of 1