1 domain laptop connecting to another domain

I am wondering how to make a laptop connected to 1 domain access resources on another domain using ssl  vpn. I have a customer whose laptop is part of his local domain.  let's call its customer.com
now I have my own domain on which I host my resources  including servers and local users. dc is on 2008 r2. now I have been requested to create a domain account for the customer in my domain and assign Ssl vpn access. so far I have created ad account and assigned ssl privileges.
when I hand in the account details the customer from his lan can login to my domain on the Ssl vpn.  but it's prompting for admin privileges when he tries to access a network share. I have assigned read permissions on the share but still customer has issues accessing resources. can u help
bb itAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

MaheshArchitectCommented:
Do you have domain trust between domains, then u can assign permissions to users , otherwise it will prompt for credentials as it can then accept credentials from same domain where share is hosted
1
JohnBusiness Consultant (Owner)Commented:
now I have my own domain on which I host my resources    

I doubt you would have a domain trust between your domain and a client. That would be unusual.

Work off domain at the other client. You may need to make a new Windows Profile for this.

I service numerous clients and do not have any domain in order to make life easier.
0
bb itAuthor Commented:
@Mahesh thank you for the solution. I was thinking about this, but i didnt have admin credentials of the customer domain to setup trust. i was hoping only to setup a 1 way trust only ,so my domain will trust customer.com and they should be able to access my lan shared folder. I will give it a go and see where i end up.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

bb itAuthor Commented:
can this be done without letting the 2 domains controllers talk to each other. I mean in networking terms, both sites need to establish a site to site vpn connection to start with. then I will have to configure routing between 2 subnets and then establish the trust between the dc's. seems to be quite a task. sorry just looking for anything easier than this.
0
JohnBusiness Consultant (Owner)Commented:
It would be vastly easier just to have a different domain Windows User Profile. Log into it when you need it
1
MaheshArchitectCommented:
Unless you open network ports between source and target PDC servers, you cannot establish domain trust
As long as you can establish network communication and name resolution between both servers, u can create trust and can achieve what you are trying to do
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
IT Administration

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.