Just one question - why a separate forest? Neil > -----Original Message----- > From: Brian Lilley [mailto:Brian.Lilley@xxxxxxxxxxxxx] > Sent: 16 September 2003 16:34 > To: 'thin@xxxxxxxxxxxxx' > Subject: [THIN] Re: attention active directory design gurus..again > > Thanks for your response Big Ron...further question for you... > > Firstly, yes we have a one way trust between the two forests, > i.e. our new shiney forest trusts the existing forest via an > NTLM job apparently as Kerberos needs two way transitive or > some such.. > > Just to be sure that I understand what you are saying...If I > am applying a GPO to an OU which holds the farm servers, both > the computer and user policy settings will apply to the users > coming in from the other forest? > > I was wondering what security context the forest users will > pop up into the server farm as. The plan is that we would > not have any users configured in our farm. Would they be > 'domain users'? I think this was the case with NT4... or > would they popup under the 'Everyone' group? > > thanks for your help once again... *********************************************** This e-mail and its attachments are confidential and are intended for the above named recipient only. If this has come to you in error, please notify the sender immediately and delete this e-mail from your system. You must take no action based on this, nor must you copy or disclose it or any part of its contents to any person or organisation. Statements and opinions contained in this email may not necessarily represent those of Littlewoods. Please note that e-mail communications may be monitored. The registered office of Littlewoods Limited and its subsidiaries is 100 Old Hall Street, Liverpool, L70 1AB. Registered number of Littlewoods Limited is 262152. ************************************************ ******************************************************** This Week's Sponsor: ThinPrint http://www.thinprint.com ********************************************************** Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm