How to give a user access to another user files globally?

Question

we have windows servers connected to Active Directory and they have users from two domains A and B.

every domain have the same users names in it.

we want to give access to users from A to files of users from B.

for example, the user A/john will have full access to all files of the user B/john on all servers.

is it possible to make such change globally on all files and on all servers using AD config or any way else?

Answer 1

Hello

Thank you for your question and reaching out.

If there is a domain trust, you can think about using groups nesting to gain access to shared folders.

In the domain where your users are situated, you might set up a Global Group, and in the domain where you want to use it, a Domain Local Group. For file/folder permissions, use the Domain Local group. Then make a member of the Domain Local group out of the Global Group you formed in the user's domain. Remember to restart the computer or log off and on again after adding the users to the Global Group so that the new access is given to them.

Reference Thread :

https://learn.microsoft.com/en-us/answers/questions/1295649/how-to-give-a-user-access-to-another-user-files-gl

--If the reply is helpful, please Upvote and Accept as answer--