Grant accessing permission of Share Folder in cross domain environment

Question

Grant accessing permission of Share Folder in cross domain environment

Gong, Allen 100

I am trying to setup a cross domain windows environment, one of my requirement is that grant accessing permission of share folder on one domain server to users/user group of another domain. Here is my setup:

tow domain server with trust setup (domaina.com trust domainb.com)
1. domaina.com
2. domainb.com
shared folder on machineA of domaina.com
user group B_ShareFolder created on domainb.com, user ******@domainb.com created on domainb.com
machineB is one of the windows machine of domainb.com
grant accessing permission of shared folder on machineA of domaina.com to user group B_ShareFolder from domainb.com

Test Cases:

assign user ******@domainb.com to group B_ShareFolder, then logon one of the machine of domainb.com with ******@domainb.com, in this case it can access the share folder successfully
assign machineB to group B_ShareFolder, then access share folder on machineB, this time it can not access.

My question is that is the second test case by-designed behavior? Can grant the accessing permission of share folder to a machine which is not in the same domain?

Yanhong Liu 14,305 Reputation points Microsoft External Staff

2024-08-29T05:35:18.39+00:00

Hello,

This is by-designed, the system will check the user right when you access shared folder not your computer, that is why it doesn't work when you add computer in this group.

Best regards

Yanhong

=====================================

If the answer is helpful, please click "Accept answer" and upvote it
Gong, Allen 100 Reputation points

2024-08-29T06:12:11.2866667+00:00

Hi @Yanhong Liu , I am not sure if you are right about this, I have tried again that add my machine to the group and it works.