-
Title
User and group overrides with cross-domain authentication scenario. -
Description
When using a user-override or group-override file with a group in a trusted domain, how should one specify and create the group?
-
Cause
It may not be clear how to reference a trusted domain group.
-
Resolution
When using a group in a domain that is not the joining domain, such as in a "Resource Domain" model, one should use a "Global Group" and should specify the domain name of the group in the override file. For example:
In this example of a user-override file we want all members of "c-shell-users" in "TESTDOMAIN2.COM" to be granted the "csh" login shell. The computer is NOT joined to "TESTDOMAIN2.COM":
<snip>
TESTDOMAIN2.COM\c-shell-users::::::/bin/csh
</snip> -
Additional Information
For additional information regarding Domain and Forest Trusts, please see: http://technet.microsoft.com/en-us/library/cc757352.aspx.