[THIN] Re: Publishing apps to Domain Local groups

  • From: Christopher Wilson <christofire@xxxxxxxxx>
  • To: thin@xxxxxxxxxxxxx
  • Date: Tue, 7 Dec 2010 10:44:29 -0500

I have to use domain local groups because it is a separate forrest being
trusted, as opposed to two domains in the same forrest in which case I would
do globals into a universal.

On Mon, Dec 6, 2010 at 8:20 PM, Magnus Hjorleifsson <magnus@xxxxxxxx> wrote:

>  Use  domain global groups in each of the  domains put the global groups
> in a universal group in one of the domains. Much easier to manage
>
> Sent from my iPhone
>
> On Dec 6, 2010, at 14:27, "Raffensberger, Stephen D" <sraffens@xxxxxxxxxxx>
> wrote:
>
>    Are they Universal groups or Global groups?
>
>
>
> *Steve Raffensberger*
>
> Produban US
>
> sraffens@xxxxxxxxxxx
>  ------------------------------
>
> *From:* thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] *On
> Behalf Of *Christopher Wilson
> *Sent:* Monday, December 06, 2010 12:28 PM
> *To:* thin@xxxxxxxxxxxxx
> *Subject:* [THIN] Publishing apps to Domain Local groups
>
>
>
> Greetings all.
>
>
>
> I have an integration problem I'm hoping someone might have some insight
> on.
>
>
>
> *Here’s the situation:  *Merger Closed Friday.  Integration in progress.
> Need to publish Citrix apps to both companies users.
>
> *Citrix Setup: *One farm CPS 3.0/Windows 2003, one farm XenApp 5/Windows
> 2008 sp2.  Both have the same issue.
>
>
>
> *AD set up:* Our users are in a domain with an empty forest root above
> it.  Their users are in a domain with an empty forest root above it.  A
> trust exists between the two forest roots.
>
>
>
> *Problem:* To publish apps to the other domain I **should** be able to
> publish Citrix apps to a domain local group in my domain, and add users from
> both domains to that domain local security group.  What I am seeing is that
> for applications published to a domain local group, users in that group from
> our domain see the app, but members from the other domain do not see the
> app.
>
>
>
> I can publish the application explicitly to users in the other domain and
> they can see and access the application.  This is not an optimal approach.
> Trying to get the domain local group working for all users.
>
>
>
> Has anyone run into this issue before and do you have any recommendations?
>
>
>
> Thanks for any help you can offer.
>
>
>
> Best regards,
>
> Christopher
>
>

Other related posts: