I am trying to setup a cross domain windows environment, one of my requirement is that grant accessing permission of share folder on one domain server to users/user group of another domain. Here is my setup: tow domain server with trust setup (domaina.com trust domainb.com) domaina.com domainb.com shared folder on machineA of domaina.com user group B_ShareFolder created on domainb.com, user ub@domainb.com created on domainb.com machineB is one of the windows machine of domainb.com grant accessing permission of shared folder on machineA of domaina.com to user group B_ShareFolder from domainb.com Test Cases: assign user ub@domainb.com to group B_ShareFolder, then logon one of the machine of domainb.com with ub@domainb.com, in this case it can access the share folder successfully assign machineB to group B_ShareFolder, then access share folder on machineB, this time it can not access. My question is that is the second test case by-designed behavior? Can grant the accessing permission of share folder to a machine which is not in the same domain?

Grant accessing permission of Share Folder in cross domain environment

Gong, Allen 95

I am trying to setup a cross domain windows environment, one of my requirement is that grant accessing permission of share folder on one domain server to users/user group of another domain. Here is my setup:

tow domain server with trust setup (domaina.com trust domainb.com)
1. domaina.com
2. domainb.com
shared folder on machineA of domaina.com
user group B_ShareFolder created on domainb.com, user ub@domainb.com created on domainb.com
machineB is one of the windows machine of domainb.com
grant accessing permission of shared folder on machineA of domaina.com to user group B_ShareFolder from domainb.com

Test Cases:

assign user ub@domainb.com to group B_ShareFolder, then logon one of the machine of domainb.com with ub@domainb.com, in this case it can access the share folder successfully
assign machineB to group B_ShareFolder, then access share folder on machineB, this time it can not access.

My question is that is the second test case by-designed behavior? Can grant the accessing permission of share folder to a machine which is not in the same domain?

Yanhong Liu 8,055 Reputation points Microsoft Vendor

2024-08-29T05:35:18.39+00:00

Hello,

This is by-designed, the system will check the user right when you access shared folder not your computer, that is why it doesn't work when you add computer in this group.

Best regards

Yanhong

=====================================

If the answer is helpful, please click "Accept answer" and upvote it
Gong, Allen 95 Reputation points

2024-08-29T06:12:11.2866667+00:00

Hi @Yanhong Liu , I am not sure if you are right about this, I have tried again that add my machine to the group and it works.

Share via

Grant accessing permission of Share Folder in cross domain environment

Your answer