I have a few of my sites with a trust relationship among two different forests with a single domain in each AD forest.

I'll skip all the politics and details that don't matter and just ask the question:

Will having a machine with a computer account in one domain and their user account in another cause any issues?

(besides GPO behavior that would need to be understood such as their computer getting a GPO applied from the computer's domain, and their user account getting a GPO applied from their user domain)


As long as you have the trust setup properly you should be all good. The one thing to watch out for is you can only put user objects from trusted domains into certain type of groups - Universal and Domain Local groups IIRC, there may be a few other limitations I'm forgetting though.

| improve this answer | |
  • What Zypher said. Have fun with cross-forest GPO processing! :) – SturdyErde Sep 25 '12 at 11:20

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.