Quick question about two-way trust.

18 Mar 2009 12:02 PM

zerodayz

Pretty simple, just need to check.

domainX sets up two-way trust with domainY

DomainY is higher in the alphabet than domainX (EA* vs ED*)

Will my domainX users have to change the 'Logon To' dropdown and select
their usual domain after I create the trust.

No migrations are happening. All users will stay with their current accounts
and machines. Will the desktop select the domain it is a member of, rather
than defaulting to the newly created trust that happens to come before it in
the alphabet. I guess what I'm asking is, is the domain list populated
alphabetically or by the current machine's domain membership.

I don't want my staff (in either domain) to come in on Monday and all
complain they can't log-in because the domain box has changed!

I did find a registry hack via group policy that can force the preferred
domain drop-down. Hoping I don't need to do this.

Thanks for reading.

Richard

18 Mar 2009 12:58 PM

Meinolf Weber [MVP-DS]

Hello zerodayz,

You can set a default for the primary domain in the registry with a script,
for example.
http://support.microsoft.com/kb/555050/en-us

So if they need the remote one they have to change.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Show quoteHide quote

> Pretty simple, just need to check.
>
> domainX sets up two-way trust with domainY
>
> DomainY is higher in the alphabet than domainX (EA* vs ED*)
>
> Will my domainX users have to change the 'Logon To' dropdown and
> select their usual domain after I create the trust.
>
> No migrations are happening. All users will stay with their current
> accounts and machines. Will the desktop select the domain it is a
> member of, rather than defaulting to the newly created trust that
> happens to come before it in the alphabet. I guess what I'm asking is,
> is the domain list populated alphabetically or by the current
> machine's domain membership.
>
> I don't want my staff (in either domain) to come in on Monday and all
> complain they can't log-in because the domain box has changed!
>
> I did find a registry hack via group policy that can force the
> preferred domain drop-down. Hoping I don't need to do this.
>
> Thanks for reading.
>
> Richard
>

18 Mar 2009 1:13 PM

Ace Fekay [Microsoft Certified Trainer]

In news:eIidnX8TMP5Tf13UnZ2dnUVZ8t-WnZ2d@giganews.com,

zerodayz <zerod***@zerodayz.com.invalid>, posted the following:
Show quoteHide quote

> Pretty simple, just need to check.
>
> domainX sets up two-way trust with domainY
>
> DomainY is higher in the alphabet than domainX (EA* vs ED*)
>
> Will my domainX users have to change the 'Logon To' dropdown and
> select their usual domain after I create the trust.
>
> No migrations are happening. All users will stay with their current
> accounts and machines. Will the desktop select the domain it is a
> member of, rather than defaulting to the newly created trust that
> happens to come before it in the alphabet. I guess what I'm asking
> is, is the domain list populated alphabetically or by the current
> machine's domain membership.
>
> I don't want my staff (in either domain) to come in on Monday and all
> complain they can't log-in because the domain box has changed!
>
> I did find a registry hack via group policy that can force the
> preferred domain drop-down. Hoping I don't need to do this.
>
> Thanks for reading.
>
> Richard

IIRC, it should default to the machine's joined domain.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
ace***@mvps.RemoveThisPart.org

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

18 Mar 2009 1:50 PM

Phillip Windell

"zerodayz" <zerod***@zerodayz.com.invalid> wrote in message
news:eIidnX8TMP5Tf13UnZ2dnUVZ8t-WnZ2d@giganews.com...
> Pretty simple, just need to check.
>
> domainX sets up two-way trust with domainY
>
> DomainY is higher in the alphabet than domainX (EA* vs ED*)
>
> Will my domainX users have to change the 'Logon To' dropdown and select
> their usual domain after I create the trust.

It will default to the Domain the macine is actually a member of.

It will also remember the "last one used".

It is no different behavor than the Domain-vs-LocalMachine that is already
on the dropdown to start with.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

18 Mar 2009 4:53 PM

zerodayz

That's what I wanted to know.

Thanks for the help guys.

zd

Show quoteHide quote

"zerodayz" <zerod***@zerodayz.com.invalid> wrote in message
news:eIidnX8TMP5Tf13UnZ2dnUVZ8t-WnZ2d@giganews.com...
> Pretty simple, just need to check.
>
> domainX sets up two-way trust with domainY
>
> DomainY is higher in the alphabet than domainX (EA* vs ED*)
>
> Will my domainX users have to change the 'Logon To' dropdown and select
> their usual domain after I create the trust.
>
> No migrations are happening. All users will stay with their current
> accounts and machines. Will the desktop select the domain it is a member
> of, rather than defaulting to the newly created trust that happens to come
> before it in the alphabet. I guess what I'm asking is, is the domain list
> populated alphabetically or by the current machine's domain membership.
>
> I don't want my staff (in either domain) to come in on Monday and all
> complain they can't log-in because the domain box has changed!
>
> I did find a registry hack via group policy that can force the preferred
> domain drop-down. Hoping I don't need to do this.
>
> Thanks for reading.
>
> Richard
>
>
>

18 Mar 2009 5:39 PM

Ace Fekay [Microsoft Certified Trainer]

In news:nYidnVI_57Rju1zUnZ2dnUVZ8hKWnZ2d@giganews.com,

zerodayz <zerod***@zerodayz.com.invalid>, posted the following:

> That's what I wanted to know.
>
> Thanks for the help guys.
>
> zd

You are quite welcome!

Ace