Unable to View or Add Trusted Domain Security Principals from "Members of" Properties Tab (237905)


The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server
This article was previously published under Q237905

SUMMARY

When you administer a domain, security principals from the parent domain or other trusted domains are not visible in the "Member Of" Properties tab of a domain user. The only domain accounts that are allowed to be added or visible are the present domain groups. Only domain groups from the present domain are shown, despite the fact the member is a member of other trusted domain groups.

MORE INFORMATION

This behavior is by design because users should be not added to groups of other domains directly, but rather they should be added to Global groups and the Global groups added to other trusted domain groups. This behavior was implemented for performance reasons to alleviate the task of enumerating all groups from other domains.

To view a user's group membership for a domain(s), use the resource kit utility Showgrps.exe..
Modification Type:MajorLast Reviewed:11/13/2003
Keywords:kbinfo KB237905
©2003 Microsoft Corporation. All rights reserved.