SharePoint 2013 and multiple domains

Hello,

We have two domains; Domain A and Domain B. The SharePoint 2013 server is located in Domain A and users in that domain are currently using the intranet. We would like for users in Domain B to be able to use the SharePoint as well.

Question: How can we configure SharePoint so Domain B user profiles and authentication can access SharePoint?

Currently there's a two-way trust between the two domains (different forests).
I have set up a user profile synchronization to Domain B and in Central Administration I can see the Domain B user profiles.
I have created Universal Security Groups in Domain B which will be used in the SharePoint.

Problem: When I open the permissions for a Document Library, I cannot resolve the users or groups in Domain B. Can someone please help us figure out what's wrong?

Thanks!
AuhnAsked:
Who is Participating?
 
Rainer JeschorCommented:
Hi,
you first have to configure the people picker, so that the second domain is also searchable:

1. Logon onto your SharePoint server as farm AND local admin.
2. Open a CMD explicitely with "Run as Administrator"
3. Adjust the following two commands to fit your environment and run them one by one
stsadm -o setproperty -pn peoplepicker-searchadforests -pv "forest:domainone.com;forest:domaintwo.com,DomainTwo\ReaderAccount,C0mplEXPW1" -url http://YourCentralAdminUrl
stsadm -o setproperty -pn peoplepicker-searchadforests -pv "forest:domainone.com;forest:domaintwo.com,DomainTwo\ReaderAccount,C0mplEXPW1" -url http://YourSharePointAppUrl

Open in new window

Question is: is the second domain a dedicated forest OR an additional domain in the existing forest?

Main configuration possibilities and settings: https://technet.microsoft.com/en-us/library/gg602075.aspx
-searchadforest property: https://technet.microsoft.com/en-us/library/cc263460(office.12).aspx

Additional info about the configuration change in SP 2013:
http://sharepoint-community.net/profiles/blogs/sharepoint-2013-people-picker-problem-with-2-way-trusted-domains

And an alternative solution when you want to use Powershell:
http://www.sp-eg.de/Blog/Beitrag/15/The-People-picker-and-domain-trusts

HTH
Rainer
0
 
AuhnAuthor Commented:
Thanks a lot for a swift and spot on answer! This solved our issues :-)

As an answer to your question: Both domains exist in separate forests.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.