topic Re: Can't log on to SIM croos a forest trust in Server Management - Systems Insight Manager

Can't log on to SIM croos a forest trust

Michael Jensen_2 — Mon, 28 Nov 2005 16:31:57 GMT

Hi
I have my SIM 50 SP 2 installed in forest one but the main part of the users who should have access to SIM is in forest two.
I have added a domain local group (I have also tried with a global group) from forest one to have administrator rights in SIM, then I have added a global group from forest two to the local group.
To the global group the administrators are added.
My problem is that I cant log on to SIM with a user from forest two, if I create a user in forest one this works without a problem
This set up also work with IM7 SP2.3 , except groups are not available in IM7.

Regards

Michael

Re: Can't log on to SIM croos a forest trust

Pagnotta — Fri, 02 Dec 2005 07:07:44 GMT

In my opinion this could be an AD forest trust issue. If you want a server in forest one to authenticate a user from forest two, you must have a trust between forest that says " users from forest two are OK".

Furthermore, if you have forests with multidomains you need probably to set trusts relationships specifcally between the domains you are using. On windows systems, inter-forest authentication is established through NTLM and I'm not sure the kind of transitive trusts do exist...check with microsoft.

Hope this helps

Angelo