Here is the scenario:

I have 2 domains. Domain A is corporate, Domain B is local to our site.

Each domain has its own SharePoint that uses its respective AD and User Profile Syncs wonderfully.

The powers that be are forging ahead with a "single logon" project where users use the Domain A login ID and can still use both Sharepoints without issue or barrriers.

Accessing Domain B sites as a Domain A user is fine, it resolves users & AD groups in Domain A fine. However... I cannot seem to configure a User Profile Sync Connection in Domain B to sync users from Domain A.

We have a 1 way trust in place.

I'm sure I need to do this as some workflows encounter issues depending on which domain user triggered it. Domain A users are also getting restricted search results on Domain B crawled file shares (none!)

Hope this made sense!

  • My hunch is that I need to add the Domain B sync service account as a delegate to Domain A? – SimonW Dec 17 '15 at 16:03
  • Why not set up a 2-way trust between the domains? Check this link. – Mihail-Florin Popa Dec 17 '15 at 16:15
  • Yep, that would be the simple option but it's a no go unfortunately. – SimonW Dec 17 '15 at 16:25
  • I see. As far as I was aware, if SharePoint doesn't trust a domain, it will not users from that domain access it. I have just found this short bit that states that there is another option besides 2-way trust. I don't know the details, but it may help. – Mihail-Florin Popa Dec 17 '15 at 16:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.