What about simply setting up cross-domain trusts? Wouldn't that work? Right now, our Citrix servers are in 1 domain and our users are in another domain. . . . ---------------------------------------------------------------------------- -------------- Melvin Columna Jascom Solutions, Inc. http://www.JascomSolutions.com <http://www.jascomsolutions.com/> eMail: thin-list@xxxxxxxxxxxxxxxxxxx <mailto:thin-list@xxxxxxxxxxxxxxxxxxx> ---------------------------------------------------------------------------- -------------- -----Original Message----- From: Robert Coffman - Info From Data Corporation [mailto:bcoffman@xxxxxxxxxxxxxxxx] Sent: Wednesday, July 30, 2003 8:58 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Supporting other domain's users Hey all, Environment is Win NT TSE/MetaFrame XPe. Currently supporting only users in a single domain. This company is a subsidiary, and would like some of the users in other domains to be able to access these Citrix servers. The current environment requires them to have another userid, and they would like to get away from that. Active directory is currently being rolled out. Here are the issues that immediately came to mind that I have to deal with. Some of these are simple, others I'm not sure. Anyone else been down this road and can offer any insight/advice? User build scripts Roaming Profiles & "Windows NT Profile" setting in User Manager, "User Profile" in the Terminal Services Profile tab of AD Users/Groups. Potential conflict with other Citrix or Terminal Server environments. Drive mappings. I don't know if drive mappings are consistent throughout the domains or not. Some applications rely on specific mappings(dependent on app). Weekly maintenance scripts Citrix Policies - using global groups ICA Connection Permissions Published Application Permissions (and the related security request procedures as well) For application specific stuff I'd have to review each app NFuse page would require entry of domain Directory security related to Citrix groups (if any) Thanks! - Bob Coffman