Re: User login between domains in the same tree/frrest

Hi Shae
Have you look into UPN.. ??
By default UPN suffix for a user account is the domain containing the
account however, UPN suffixes can also be used .

To make it simpler to log on to the network, Active Directory allows you to
implement a single UPN suffix for all users.

HTH

"Shae" <Shae@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:DDE085D9-F168-4A27-8A1A-92F9C36D8DD8@xxxxxxxxxxxxxxxx
Eric,

Is there no way that a user from singapore (child domain) can log onto our
domain (parent)?

i.e if they visit our site (parent) with their laptop?

is there no such thing as a global user? that can logon to a domain that
is
the parent of its own domain?

If not, then maybe we should just keep it part of our domain, with a site
link

"Eric Denekamp" wrote:

By the way, it would work the other way around too: move your workstation
to
the SG domain and try to log on with the rogerrabbit account and it
should
work.
With the dowmain selection you only point to the location your account
is,
so the easy route to validation.

good luck

Eric

"Eric Denekamp" <ericd@xxxxxxxxxxxxxxx> wrote in message
news:8B8557D9-8DB3-4702-A154-B67AA39AA3CC@xxxxxxxxxxxxxxxx
You always log on to the domain your account is in, so if your account
ir
in domain.local you only can log on to that domain, on the other hand,
your MACHINE (i.e.) workstation does not have to be in the same domain,
so
if you create an account: jessicarabbit in the SG domain, and try to
log
on with this account, you should be able to do so.
You sit behind the workstation, select SG for domain, enter
jessicarabbit
for username and the correct password, you should be able to log on.

good luck

Eric

"Shae" <Shae@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1E4BD834-8350-451E-90BE-65F989DBC754@xxxxxxxxxxxxxxxx
Is this how it should be?

can a user from a parent domain not login to the child domain because
he
is
not a member of that domain??

But rather he can be on a worksatation that is connected to the child
domain, and login from there to the parent domain on which his user
account
is created?

sorry to try to answer my own question, but is this correct?

"Shae" wrote:

Hi eric, thanks for the reply

tree/forrest root domain is domain.local, child is sg.domain.local

I created a new user on domain.local (rogerrabbit), and also added a
workstation to domain.local, i called this workstation WS1.

When i restart the WS1 and get to logon screen, I can select SG or
DOMAIN
from the drop down list, i can login to the parent domain (DOMAIN) of
which
this workstation and user are a member of.

But if i select SG. I cannot login!

hope this further explaination helps, and that you can assist me
further

"Eric Denekamp" wrote:

Hi, Some things are unclear: how did you try to log on? on the DC?
then it
would be logical, because there a "normal" user does not have the
logon
locally right. ( oh and by the way a domain admin in one domain
will
be a
normal user in another domain, so)
Can you please explain the setup you used to check this, AFAIK it
is
possible to log on to the parent domain when located on a machine
in
the
child domain. the user does have to choose from the dropdown list
his
OWN
domain...(or use his user principal name)

good luck

Eric


"Shae" <Shae@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F08B5C82-0033-4A85-8403-A8A6BB073153@xxxxxxxxxxxxxxxx
Hi,

My organisation currently has one domain and several sites.

We are based in australia and have a new remote server in
singapore,
we
are
considering making this a child domain of our current domain, but
are
unsure
if we should make it a child domain or just a DC of our current
domain
with a
site link?

if we make it a child domain, and we have users in singapore on
this
child
domain, can those users then come to our parent (forrest/tree
root)
domain
and login with their user accounts created in ths singapore child
domain,
and
vice versa?

I thought this was possible but i recreated this situation in a
dev
environment, creating a user in the parent domain, but that user
was
unable
to login to the child domain!

any advice?

thanks








.

Relevant Pages

  • Re: User login between domains in the same tree/frrest
    ... You always log on to the domain your account is in, so if your account ir in domain.local you only can log on to that domain, on the other hand, your MACHINE workstation does not have to be in the same domain, so if you create an account: jessicarabbit in the SG domain, and try to log on with this account, you should be able to do so. ... can a user from a parent domain not login to the child domain because he is ...
    (microsoft.public.windows.server.active_directory)
  • Re: User login between domains in the same tree/frrest
    ... With the dowmain selection you only point to the location your account is, ... can a user from a parent domain not login to the child domain because he ...
    (microsoft.public.windows.server.active_directory)
  • Re: Creating Multiple Users in Child Domain
    ... >> student account on a child domain. ... it creates users on parent domain. ... >I believe you're referring to the UPN suffix. ...
    (microsoft.public.win2000.active_directory)
  • Re: Creating Multiple Users in Child Domain
    ... > student account on a child domain. ... it creates users on parent domain. ... I believe you're referring to the UPN suffix. ... UPN suffix is that of the parent domain does *not* mean the account ...
    (microsoft.public.win2000.active_directory)
  • Exchange in child domain
    ... Domain account resides in parent domain ... I have set up a child domain and want to move some account from parent domain to child domain. ... If I move the account to child domain, will all the account in child domain can still use Exchange server in parent domain? ...
    (microsoft.public.exchange.design)