Access to child domain via LDAP

[Michael Yashin]

We have main AD Domain and child(nested) domains. They
have trust relationship.

Is it possible to get users/groups/etc. of child domain
from LDAP server of main domain?

The problem is that each AD controller have its own LDAP
service that gives info only about owned objects. And our
directory is organised so that we have cross references
between domains (ie group memebership).

 

[Benoit Boudeville [Exchange MVP]]

try to query a global catalog, that's its purpose
use as a strandard LDAP server but on port 3268 or ADSI GC://