Unable to add user from child domain

Question

I am trying to add a user from a child domain to a group in the root domain, but I am receiving this error:

The specified user was not found. If the user exists on another active directory Domain controller in the enterprise, it may take 15 minutes or more for the user to be replicated to the global catalog

Answer 1

Hi @MamadouCoulibali-4946

Did you check replication and active directory health using the following command:

repadmin /showrepl
dcdiag

Did you try to disable and enable global catalog on domain controller in root domain ?

Check if you have the same issue when Global catalog is unchecked in root domain.

---

Please don't forget to accept helpful answer

Answer 2

Make sure that the group scope is either domain local or universal. It cannot be domain global - if it is, convert it to either of the other two.

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

Answer 3

Hello MamadouCoulibali-4946,

Thank you for posting in Q%A forum.

1.Please check if this user is actually in child domain.

2.Please check AD replication on PDC in the root domain.

repadmin /showrepl >C:\rep1.txt

repadmin /replsum >C:\rep2.txt

repadmin /showrepl * /csv >c:\repsum.csv

3.Force the entire AD forest to replicate and check if you can perform the same operation.

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.