I have a conceptual question:
I manage user accounts for local network access using Active Directory (let's call this network A). We use an external service provider for email accounts, who's also running Active Directory for account management (network B).
In this configuration, every user ends up with two usernames: one for the local network (A), and one for email (B). Let's call the usernames
I was wondering whether these usernames could be
unified by creating a trust relationship between the two active directory servers? Is that possible? It seems to be right now, that the purpose of a AD trust relationship is only to allow users from network B to authenticate against their home AD while being on network A. Does a trust relationship also allow to
connect / map AD accounts on different networks (different ADs), so that using a single username, will log the user into both network A and network B? That is, using
DOMAIN_A\username as a long-in, I can login to both network A resources and network B resources? I this is indeed possible, how do you have to setup the mapping between
DOMAIN_B\username? The two ADs won't be able to guess which usernames belong to the same user.
EDIT: this website might have the solution. However it is still unclear to me.