ADS Delegation

[AxL99]

Set up as follows

Two sites (X and Y) - physically they are in different countries.

Site X has a ADS X with a DC X in a Forest X
Site Y has a ADS Y with a DC Y in a Forest Y

I need to administrate Site Y ADS from Site X ADS only.

Is this possible,

 

[brontosaurus]

can you get (or do you have) connectivity over the WAN? do you have admin rights on in Forest Y? If so, set up a VPN, and fire up Terminal server...

 

[AxL99]

We have a Frame Relay to the other site - so I can see the whole network from my end. I am trying not to use Terminal Service to manage the ADS but try to manage the ADS from my own laptop/computer via the MMC and ADS snap-in.

What rights/security do I need to set up in order to have full access to the Forest.

 

[brontosaurus]

You'd need domain admin rights on the opposing Forest (assuming it's just one domain). It would probably be easiest if you were to set up an account in that domain that had the same ID and password credentials as your current one. In addition, I would think that you'd need to set up your name server as a secondary for the opposing domain, so the MMC snap-in recognizes what you're trying to administer. May I ask why you're against Terminal Server?

 

[AxL99]

I have nothing against TS - just prefer to manage it via MMC.