Add user from other domain to domain local group

[Uli Netzer]

Hi all,

I'm trying to add a user from another domain (domain trust and rights are
there) to a group in our domain. It's a domain local security group. I get the
following errors:

The server is can't process the request. HRESULT: 0x80072035 or
The object cannot be found on the server HRESULT: 0x80072030 depending on what
code I use.
I've read that the 8007 error code says it's a AD problem. That doesn't help
me though.

My code for error #1:

'strLDAPDomain = name of the domain; i.e. "global.intern"
'the DN is the distinguishedName property of the user object;
“CN=…,OU=…,OU=…,DC=global,DC=intern”
'DE is the group object of the group in our domain

strUser="LDAP://" & strLDAPDomain & "/" & item.Cells("DN").Value
DE.Properties("member").Add(strUser)
DE.CommitChanges()
DE.Close()

Code for error #2:

"LDAP://global.intern/<SID=....>"
'DE is the group object of the group in our domain

strUser="LDAP://global.intern/<SID=....>"
DE.Properties("member").Add(strUser)
DE.CommitChanges()
DE.Close()
Adding a user from our domain works with the code no problems.
Does anyone have any ideas???
Regards

Uli Netzer