Idan- It makes part sense, but in general, yes, Group Policy does not have an issue with trusts. Your described scenario below is a bit confusing. If U1 is defined in domain DB, then I'm assuming that when you say that U1 signs into domain DA, you mean that U1 is sitting at a workstation whose machine account resides in DA? In that case, when the user U1 logs on, Windows will chase the GPLinks that apply to the user account in DB as normal, and, as long as the trusts are good and both AD and SYSVOL in DB are accessible to U1, then processing works as expected, though with some small performance overhead due to having to pass-through the domain trusts.
Darren -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Monday, September 13, 2004 9:13 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] GPOs through trust? Hi All, I have a question about whether GPOs get applied in a situation where domain trust is used.. Assume AD domain DA trusts DB. There is a user U1 defined in DB. U1 belongs to a group G1 on DB. A particular GPO applies to G1 in DB. Now when user U1 signs into domain DA, using trust, does the GPO get applied, despite the fact that it's actually defined on DB, for G1 which also does not exist on DA? (Hopefully that makes sense...) Thanks! -- Idan List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
