B
Burpelson
Question Scenario:
Two active directory domains, A & B, with full two-way trusts between the domains.
A Windows 2012R2 file server joined to domain A has NTFS permissions assigned for user accounts in both domain A and domain B (domain B permissions are assigned via the trust).
The file server is then taken out of domain A and joined to domain B.
Questions:
Do the NTFS permissions previously assigned to users in domain B (via the trust) still work for domain B users now that the file server is directly joined to domain B?
Do the NTFS permissions previously assigned to users in domain A still work (over the still-existing trust between domain A and domain B)?
In this scenario, if the permissions for domain A users no longer work or are invalid, that is fine. I'm really only concerned about the domain B users. Although if there are going to be tons of NTFS permissions assigned to empty SIDs from domain A, those will probably need to be cleaned up.
I'm not worried about share permissions here - those can be manually recreated once the file server is joined to domain B.
Thanks in advance for your input.
Continue reading...
Two active directory domains, A & B, with full two-way trusts between the domains.
A Windows 2012R2 file server joined to domain A has NTFS permissions assigned for user accounts in both domain A and domain B (domain B permissions are assigned via the trust).
The file server is then taken out of domain A and joined to domain B.
Questions:
Do the NTFS permissions previously assigned to users in domain B (via the trust) still work for domain B users now that the file server is directly joined to domain B?
Do the NTFS permissions previously assigned to users in domain A still work (over the still-existing trust between domain A and domain B)?
In this scenario, if the permissions for domain A users no longer work or are invalid, that is fine. I'm really only concerned about the domain B users. Although if there are going to be tons of NTFS permissions assigned to empty SIDs from domain A, those will probably need to be cleaned up.
I'm not worried about share permissions here - those can be manually recreated once the file server is joined to domain B.
Thanks in advance for your input.
Continue reading...