Here is my setup. Domain A has a one-way forest trust with domain B such that Domain B users can access resources on Domain A's network but Domain A users cannot access resources on Domain B.

My SharePoint Server 2010 Enterprise is setup on Domain A with the service account being in Domain B.

I have incoming email configured and working for SharePoint. When I email enable a sharepoint group, it creates the DL and any Domain A users I add to that group get correctly added to the DL in AD. But when I try to add a Domain B user to that group, they never show up in the DL and there is an error in my ULS log:

System.InvalidOperationException: An error occurred while translating user name 'DomainB\Userid' to a Windows account name. (DS_NAME_ERROR_DOMAIN_ONLY) at Microsoft.SharePoint.EmailIntegration.SPEWSUtil.TranslateUserName(String name, DS_NAME_FORMAT formatOffered, DS_NAME_FORMAT formatDesired) at Microsoft.SharePoint.EmailIntegration.SPEWSADManager.AddUsersAsMembers(DirectoryEntry distGroupEntry, String Alias, String[] MembersNt4NameList)SPEWSADManager::AddUsersAsMembers Unable to translate user name domainB\userid to FQDN name.

It seems that when SP created the DL, it created it as a universal group. I changed it to domain local and can add users to the DL from Domain B but even after this change, SP still generates the error above.

Has anyone gotten this working in a multiple forest/domain scenerio before or have any thoughts on next steps to troubleshoot?



I ended up opening a case with Microsoft and they pointed me to this KB article:


The article is for SP 2007 but it sounds like the issue still exists for SP 2010.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.