Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a few of my sites with a trust relationship among two different forests with a single domain in each AD forest.

I'll skip all the politics and details that don't matter and just ask the question:

Will having a machine with a computer account in one domain and their user account in another cause any issues?

(besides GPO behavior that would need to be understood such as their computer getting a GPO applied from the computer's domain, and their user account getting a GPO applied from their user domain)

share|improve this question
add comment

1 Answer

up vote 2 down vote accepted

As long as you have the trust setup properly you should be all good. The one thing to watch out for is you can only put user objects from trusted domains into certain type of groups - Universal and Domain Local groups IIRC, there may be a few other limitations I'm forgetting though.

share|improve this answer
    
What Zypher said. Have fun with cross-forest GPO processing! :) –  SturdyErde Sep 25 '12 at 11:20
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.