C
Chris Allen
Guest
I formed a trust relationship between two domains (domain01.com,
domain02.com). There is a global group defined on domain01 that is
critical to the operation of a SQL database. In order to use the
database users much be in the global group called "pfgusers". The new
domain (domain02) needs to access this database and needs to have it's
users placed in the "pfgusers" group. The problem is that you can't
add foreign accounts to a global group, but I have to do this... I
don't feel safe mucking around with security settings that have to do
with this proprietry database system.
How can I get my foreign users into this group? I don't want to
delete and recreate the group as a local group because I'm afraid of
breaking my database as I know the new group won't have the same SID.
I tried creating a local group on domain01 and adding it to "pfgusers"
but it won't allow me to do this.
I also can't create the pfgusers group on domain02, the database
system won't work with this. Any ideas? Thanks.
domain02.com). There is a global group defined on domain01 that is
critical to the operation of a SQL database. In order to use the
database users much be in the global group called "pfgusers". The new
domain (domain02) needs to access this database and needs to have it's
users placed in the "pfgusers" group. The problem is that you can't
add foreign accounts to a global group, but I have to do this... I
don't feel safe mucking around with security settings that have to do
with this proprietry database system.
How can I get my foreign users into this group? I don't want to
delete and recreate the group as a local group because I'm afraid of
breaking my database as I know the new group won't have the same SID.
I tried creating a local group on domain01 and adding it to "pfgusers"
but it won't allow me to do this.
I also can't create the pfgusers group on domain02, the database
system won't work with this. Any ideas? Thanks.