Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a few of my sites with a trust relationship among two different forests with a single domain in each AD forest.

I'll skip all the politics and details that don't matter and just ask the question:

Will having a machine with a computer account in one domain and their user account in another cause any issues?

(besides GPO behavior that would need to be understood such as their computer getting a GPO applied from the computer's domain, and their user account getting a GPO applied from their user domain)

share|improve this question
up vote 2 down vote accepted

As long as you have the trust setup properly you should be all good. The one thing to watch out for is you can only put user objects from trusted domains into certain type of groups - Universal and Domain Local groups IIRC, there may be a few other limitations I'm forgetting though.

share|improve this answer
What Zypher said. Have fun with cross-forest GPO processing! :) – SturdyErde Sep 25 '12 at 11:20

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.