Windows Domain Trust Query

[swain90]

Hi All,

I was wondering if anyone had any ideas with the situation I have...

I currently have two separate forests with a trust setup between them (bidirectional).

Both the Domain and Forest functional levels on each forest are at 2003.

Forest A is running Server 2003, and Forest B is running Server 2008R2.

I can create a Domain Local User Group on Forest B (Server 2008R2) and add users from Forest A (Server 2003), so as far as I can tell the trust is functioning as expected and there's no permission issues.

We have a bespoke application running on Forest B which for some reason does not recognise Domain Local User Groups. Additionally this application requires users to be added to the user group natively. This means that I can't create a Domain Local Group, add the users I need from Forest A and then add that Domain Local User Group to a Global/Universal User Group so that the bespoke application can see the users.

I think I already know the answer to my question, but is there any way of adding the users from Forest A into a Global/Universal User Group in Forest B? As this would allow the bespoke application to see/read the users from Forest A.

The bespoke application isn't something I've developed, I've had a look through some of the source code but can't see anything obvious as to how it reads the User Groups.

Thanks,

Swain90

 

[swain90]

Forest A also runs the same bespoke software (but an earlier version) and needs the User Group to also be Global/Universal for it to work so I couldn't add them the other way around.

I'm going to creating a a new domain in forest A and see if that gives me what I need.

It's not LDAP, having gone a bit further, the applications uses lmaccess.h and uses functions within that API.