Add a domain user to a group in another domain in another forest

Question

Hello - I have a query here. How do I add a user - usera from a domain in a forest to another domain in another forest.

Scenario - usera is in x.local forest, groupa is in x.local. DC of domain/ forest - y.local has WriteProperty access on groupa. I want to add usera into groupa from DC - y.local.

How do I add this using AD module of powershell?

Answer 1

Hello Haribabu, Santosh (Chennai),

Thank you for posting in Q&A forum.

x.local and y.local has two way-trust forest trust.

Administrator in y.local can sign in the Domain Controller in x.local.

Administrator in x.local has given the Administrator in y.local to add user in x.local to group in x.local.

For example:

I has a.com and b.com.

Administrator in Domain B give the Administrator in Domain A add user in domain B to group (such as Administrators in domain B) in Domain B.

Sign in DC in domain B using Administrator in domain B.
Right click Administrators and add Administrator account in domain A, give the permissions under Permissions below and check all the options under Properties.

Sign in Administrator in domain A on DC in domain B. Then you can add user in domain B to Administrators in domain B.

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.