Adding a group to access control list in another Domain

Giganews Newsgroups
Subject: Adding a group to access control list in another Domain
Posted by:  PMC1 (paulc…@gmail.com)
Date: Wed, 29 Apr 2009

Hi,

I'm want to allow an admin from an external domain access my active
directory so they can add a Global Security group from this domain
(DomainA) to the access control list of a share on the external domain
(DomainB). I want the admin in the external domain to only have Read
Access to this domain so giving the external Admin the password to an
administrator account on this domain is not going to work. So my
question is when creating a user ID for the external admin to use,
what rights should I grant him to allow him read access to this domain
such that he can pull down groups from DomainA to be added to ACL's on
DomainB

Configuration:
Both domains are in completely seperate Windows 2003 Forests
There is a 1 way non transitive external trust from DomainA to DomainB
(i.e. the external domain trusts this domain but not the other way
round)

Thanks in advance for any advise

Paul

Replies