|
Home > Archive > Microsoft Content Management Server > September 2005 > Give permissions to CMS with universal groups
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Give permissions to CMS with universal groups
|
|
| tarajan 2005-09-26, 6:00 pm |
| Hi,
I hold my permission groups for our intranet systems in a native AD.
Now I had to change the group scope from Domain local to Universal,
because I must grant permissions to multiple domains. But when I change
my groups, the permission for the MCMS did not work any longer.
Is there a problem with using universal groups for granting permissions
in MCMS. It is MCMS 2002 with SP1.
Best Regards
| |
| Stefan [MSFT] 2005-09-26, 6:00 pm |
| Hi Tarajan,
you need to ensure that the MCMS system account has rights to read and
enumerate the members in the group.
So a valid trust relationship between the domain holding the group and the
domain the MCMS system account comes from is required.
Cheers,
Stefan
--
This posting is provided "AS IS" with no warranties, and confers no rights
New to MCMS?
Check out this book: Building Websites Using MCMS: http://tinyurl.com/6zj44
----------------------
"tarajan" <andreas.gast@gmail.com> wrote in message
news:1127745536.799922.9960@g44g2000cwa.googlegroups.com...
> Hi,
>
> I hold my permission groups for our intranet systems in a native AD.
> Now I had to change the group scope from Domain local to Universal,
> because I must grant permissions to multiple domains. But when I change
> my groups, the permission for the MCMS did not work any longer.
> Is there a problem with using universal groups for granting permissions
> in MCMS. It is MCMS 2002 with SP1.
>
> Best Regards
>
| |
| tarajan 2005-09-27, 2:50 am |
| Hi Stefan,
but in the first step I change only the group scope to universal. I did
not change the members of the groups. They are still from the same
domain, in which also the MCMS system account is.
I don't know, why I get a problem. Could there be a wrong configuration
in AD preventing universal groups to function properly?
| |
| Stefan [MSFT] 2005-09-27, 7:57 am |
| Hi,
actually I never tested with universal groups myself - so I cannot comment
on this in detail.
You should open a support case for this.
Cheers,
Stefan
--
This posting is provided "AS IS" with no warranties, and confers no rights
New to MCMS?
Check out this book: Building Websites Using MCMS: http://tinyurl.com/6zj44
----------------------
"tarajan" <andreas.gast@gmail.com> wrote in message
news:1127800209.614936.54840@g43g2000cwa.googlegroups.com...
> Hi Stefan,
>
> but in the first step I change only the group scope to universal. I did
> not change the members of the groups. They are still from the same
> domain, in which also the MCMS system account is.
> I don't know, why I get a problem. Could there be a wrong configuration
> in AD preventing universal groups to function properly?
>
|
|
|
|
|