I have built a forest for tests that consists of a forest root domain and two secondary domains. Enterprise administrators in the root domain do not appear to have administrator privileges on the member servers in the secondary domains.
In Active Directory Domains and Trusts, transitive trusts are validated.
DCDiag shows no errors.
Repadmin / showrepl shows no errors and all successful authentications.
DNS It seems be working well. Zones are replicated to all DNS servers integrated in the forest.
NLTest shows that everything seems to be fine:
But when I log on to a secondary domain member server as a root business administrator of the forest (which works fine), I do not get administrator permissions:
What else can I check?