Microsoft KB Archive/237905

= Unable to View or Add Trusted Domain Security Principals from "Members of" Properties Tab =

Article ID: 237905

Article Last Modified on 2/27/2007

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Datacenter Server

-



This article was previously published under Q237905



SUMMARY
When you administer a domain, security principals from the parent domain or other trusted domains are not visible in the "Member Of" Properties tab of a domain user. The only domain accounts that are allowed to be added or visible are the present domain groups. Only domain groups from the present domain are shown, despite the fact the member is a member of other trusted domain groups.



MORE INFORMATION
This behavior is by design because users should be not added to groups of other domains directly, but rather they should be added to Global groups and the Global groups added to other trusted domain groups. This behavior was implemented for performance reasons to alleviate the task of enumerating all groups from other domains.

To view a user's group membership for a domain(s), use the resource kit utility Showgrps.exe..

Keywords: kbinfo KB237905

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.