Active Directory error message "the following object is not from a domain listed in the Select location forestB\username

Question

Hello Community
    "forestA" is my forest it is a Windows 2008 Server Enterprise Edition
domain controller using Active Directory and the UI.
    In my forest ("forestA") trust relationship I created a "One-Way, Out-going"
forest trust with Forest-Wide authentication so that a different forest user(s) or
group(s) with a different admin in a forest named “forestB” can access the resources in my “forestA”
    But also forestB needs to create a "One-way, Incoming" forest trust so that
I can either add the user(s) or group(s) from “forestB” into to a "Global Security - Group"
in my "forestA" or I can
 add user(s)  as  "domain user(s)" from “forestB” into my "forestA".
    The problem is that when I right click  the global group in my forestA  and then
properties, when I click "Members" and then the "Add" button when I type
"forestB\username" I get an error message from Active Directory stating:
    "the following object is not from a domain listed in the Select location
dialog box, and is therefore not valid: forestB\username".
    Am I doing something wrong when creating the one-way trust in my
“forestA” or is the one-way trust being created wrong by the other domain admin in the other “forestB”?
    Or could I possibly need to select "Change Domain" or "Change Domain Controller"
before adding the users or Groups to my forestA from forestB?
    That is why I am asking
 how do you add an Active Directory user from one forest into another forest?
    Thank you
    Shabeaut

Answer 1

Hello Denis Cooper
    That is the end result.
    What I was trying  to do was that I was trying to
 bring in the user(s) and group(s) from “forestB”  into
my “forestA”  Global group.
    Later on I was going to add the user(s) or Global groups(s) that I brought into my dc in my forestA
 into the domain local groups  on my member servers in my forestA.
    So since the error message is:
"the following object is not from a domain listed in the Select location dialog box, and is therefore not valid: forestB\username".
Does your response
 mean only Global group(s) from forestB not domain user(s) from forestB have
 to been added to domain local groups in forestA?
Or is it also possible to add Global group(s) from “forestB” to Global group(s) in my “forestA” and if so
how without getting the above error message?
Thank you
    Shabeaut