nav2567
asked on
SAP client access via AD domain trust.
Hello,
We have a WIN2K8 forest with one domain. We need to setup a one-way trust between our domain and the vendor domain for our SAP clients to access SAP resources in the vendor's AD domain.
For security concern, we want to setup minimal rights to our SAP vendor to access our AD environment. I am thinking of creating a child domain in our AD forest. Within this child domain, I will create a group to include our SAP users of the company.
Anyone who have experienced this and have a suggestion to us, please advise.
Thanks in advance.
We have a WIN2K8 forest with one domain. We need to setup a one-way trust between our domain and the vendor domain for our SAP clients to access SAP resources in the vendor's AD domain.
For security concern, we want to setup minimal rights to our SAP vendor to access our AD environment. I am thinking of creating a child domain in our AD forest. Within this child domain, I will create a group to include our SAP users of the company.
Anyone who have experienced this and have a suggestion to us, please advise.
Thanks in advance.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks.
Here is some information, this maybe something you can utilize.
https://technet.microsoft.com/en-ca/library/cc782627(v=ws.10).aspx
http://searchwindowsserver.techtarget.com/feature/AD-permissions