Thanks to Darren, Guy and Phil for the help -- this is pretty much the answer I was hoping for. :-)
Cheers, -- Idan On Mon, 13 Sep 2004, Renouf, Phil wrote: > The only GPOs that won't apply are machine account GPOs since those will > be based on the DA GPOs since the workstation is a member of the DA > domain. > > Phil > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia > Sent: Monday, September 13, 2004 2:02 PM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] GPOs through trust? > > Idan- > It makes part sense, but in general, yes, Group Policy does not have an > issue with trusts. Your described scenario below is a bit confusing. If > U1 is defined in domain DB, then I'm assuming that when you say that U1 > signs into domain DA, you mean that U1 is sitting at a workstation whose > machine account resides in DA? In that case, when the user U1 logs on, > Windows will chase the GPLinks that apply to the user account in DB as > normal, and, as long as the trusts are good and both AD and SYSVOL in DB > are accessible to U1, then processing works as expected, though with > some small performance overhead due to having to pass-through the domain > trusts. > > Darren > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] > Sent: Monday, September 13, 2004 9:13 AM > To: [EMAIL PROTECTED] > Subject: [ActiveDir] GPOs through trust? > > Hi All, > > I have a question about whether GPOs get applied in a situation where > domain trust is used.. > > Assume AD domain DA trusts DB. There is a user U1 defined in DB. > U1 belongs to a group G1 on DB. A particular GPO applies to G1 in DB. > > Now when user U1 signs into domain DA, using trust, does the GPO get > applied, despite the fact that it's actually defined on DB, for G1 which > also does not exist on DA? > > (Hopefully that makes sense...) > > Thanks! > > -- Idan > > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
