2 domains structure

[Acid_jaws]

Hi,

I run two domains in different branches. for the purpose lets call them
domainA and domainB
DomainA and domainB each hold an exchange server DomainA holds EX2k while
DomainB holds EX3k
each branch users authenticate to there local domain.
the two domains are trusted.
we are using Metaframe(citrix) which located in DomainA.
up until now, i have created user accounts in both domains, one in the user
local domain
and another in the other domain for the propose to login to the Metframe in
the other domain.
im looking to know how to replicate the user accounts from DomainB to
domainA with out
having to create two user accounts every time.

Thanks
Jerry

 

[Tomasz Onyszko]

Hi,

I run two domains in different branches. for the purpose lets call them
domainA and domainB
DomainA and domainB each hold an exchange server DomainA holds EX2k while
DomainB holds EX3k
each branch users authenticate to there local domain.
the two domains are trusted.
we are using Metaframe(citrix) which located in DomainA.
up until now, i have created user accounts in both domains, one in the user
local domain
and another in the other domain for the propose to login to the Metframe in
the other domain.
im looking to know how to replicate the user accounts from DomainB to
domainA with out
having to create two user accounts every time.

create trust relationship between this to domains and stop duplicating
accounts in this domains

 

[Laura E. Hunter \(MVP\)]

Have you looked at MIIS?

http://www.microsoft.com/windowsserversystem/miis2003/default.mspx

Also (and I'm not a Citrix person, so forgive me if this is an obvious
question), why not simply assign permissions in the two domains using only a
single account. Domain trust relationships will allow you to assign users
in DomainA permissions to resources in DomainB, and vice versa, without
needing to create a duplicate account.

Active Directory Operations Guide: Managing Trusts

http://www.microsoft.com/technet/pr...irectory/maintain/opsguide/part1/adogd05.mspx

 

[Acid_jaws]

Well Laura,

I need to have an account in DomainA AD, in order to allow Terminal Services
logon
from DomainB

 

[Acid_jaws]

Tomas hi.

How could i allow Terminal Services logon?
I need to have an account object no?

 

[Cameron]

Ahhh...no you don't - Domain A Terminal Services just needs to trust the
account in Domain B.

 

[Tomasz Onyszko]

Tomas hi.

How could i allow Terminal Services logon?
I need to have an account object no?

When You create trust between these two domains and the terminal server
woll be a member of one of them, only account which is needed is a
domain account in one of domain.