Domain A (Forest Tree Root) (Primary Domain)
Domain B (Direct Outbound) (Direct Inbound)
There is a two way trust between the two Forests Domain A/B. This scenario is used to connect two companies together.
Now, lets say we have an application that uses active directory to authenticate on Domain A.
A user from Domain B is added to a group that exists in Domain A that allows them access to that application. This applications uses ADSI to connect to the Domain A domain controller for user authentication.
First Question: By using ADSI from the domain controller on Domain A, will it know to traverse the trust and validate the user in Domain B? Or does the application need to specifically point to the domain controller on Domain B as well.
Second Question: To get a listing of all users in Domain B from Domain A will I be able to query this for example in powershell using ADSI/LDAP from a domain controller in Domain A or will I specifically need to hit a domain controller in Domain B?