AD Groups Not Being Inherited From Child Domain
Summary
When dealing with parent/child domain relationships local/global group objects are not automatically inherited from the child to the parent domain
Overview
For some reason in Active Directory a Parent Domain will inherit User Objects from the Child Domain, but only Universal Groups, not Global or Local Groups. Understandably this can lead to some confusion, since users have probably already defined these objects in their Exinda, causing them to think it's an Exinda issue because that is where they're expecting to see the traffic from these Group Objects.
Cause
This is just the way AD works, it's not a bug or defect.
Resolution
The resolution is simply to use Universal Group objects if it is desirable to monitor both domains from one Exinda.
Priyanka Bhotika
Comments