SharePoint 2013 on-premises not assigning permission to AD Security Group

Question

Hi,

I have two AD domains A1 and B1 and these contains security groups. I can assign permission security group in SharePoint 2013 on-premises for A1 domain only. SharePoint showing security groups from both the connections, but permission is not be assigned to a security group that is under B1 domain connection. I checked SharePoint Central Administration and connections are proper and synchronizing working well.

Please help.

Thanks,

Answer 1

Keep in mind the User Profile Service has no impact on People Picker nor security.

One thing SharePoint doesn't support is foreign security principals, that is, if you assign a UserB in DomainB to GroupA in DomainA. Is that what you're attempting to do, or are you attempting to assign GroupB in DomainB to a SharePoint ACL?

How do you have your People Picker Settings configured (SPWebApplication.PeoplePickerSettings)? Even in a two-way trust, this will be required for name resolution.

Answer 2

Hi @Rajesh Lohar , thank you for posting in the Q&A forum.

If you plan to support connections for multiple AD domains with one SharePoint farm, domain trust (one way or two way) needs to be configured accordingly, for domain B1 in this scenario.
Here is a post with discussion that might be helpful: Support Multiple Active Directory Domains.

Please feel free to point out and share more information if we have misunderstood your situation.

---

If an Answer is helpful, please click "Accept Answer" and upvote it.
**Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. **