Can you use UPN accross different trusted Forest?

[Nickattu]

I have a client with two trusted forests. I would like to
use UPN logons for the users, but, I can't becuase they
have two forest. I want anybody to sit down on any
machine and logon with there e-mail address (UPN).

It works fine as long as the users is part of the same
domain that the computer was joined to. But a user from
forest 2 can not.

Has anyone done this?

How can I?

 

[Ace Fekay [MVP]]

In

I have a client with two trusted forests. I would like to
use UPN logons for the users, but, I can't becuase they
have two forest. I want anybody to sit down on any
machine and logon with there e-mail address (UPN).

It works fine as long as the users is part of the same
domain that the computer was joined to. But a user from
forest 2 can not.

Has anyone done this?

How can I?

Is this Windows 2000 or 2003?

There's a feature in Windows 2003 called Name Suffix Routing (UPN Routing)
that will allow cross forest UPN logons among other things. If you have
WIndows 2000, this will not be possible.

Routing name suffixes across forests:
http://www.microsoft.com/resources/.../2003/standard/proddocs/en-us/x_routename.asp

or a shorter URL to the same link above:
http://tinyurl.com/3w9cw


Windows 2003 Forest Trusts:
http://www.winnetmag.com/WindowsSecurity/Articles/ArticleID/38436/pg/2/2.html

--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services

Security Is Like An Onion, It Has Layers
HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.