Domain A (Forest Tree Root) (Primary
Domain)
Domain B (Direct Outbound) (Direct
Inbound)
There is a two way trust between the
two Forests Domain A/B. This scenario is used to connect two companies
together.
Now, lets say we have an application
that uses active directory to authenticate on Domain
A.
A user from Domain B is added to a
group that exists in Domain A that allows them access to that application. This
applications uses ADSI to connect to the Domain A domain controller for user
authentication.
First
Question: By using ADSI from the domain controller on Domain A, will it
know to traverse the trust and validate the user in Domain B? Or does the application
need to specifically point to the domain controller on Domain B as
well.
Second
Question: To get a listing of all users in Domain B from Domain A will I
be able to query this for example in powershell using ADSI/LDAP from a domain controller
in Domain A or will I specifically need to hit a domain controller in Domain
B?
Thanks!
Comments
Post a Comment