Nfuse enterprise with 2 domains

[jtnewt]

I am hopeing to implemet nfuse enterprise in a dual domain situation. 1 nt4 domain 1 2000 domain. My citrix servers are in the 2000 domain but all my users are in the NT4 domain. How do I get the initial setup to pull the administrators and groups from the nt4 domain?

Thanks
TJ

 

[DDILL]

You will need to install the Enterprise Services for Nfuse

 

[jtnewt]

Yes I am aware of that. When I install enterprise services, on the initial set up it only displays the 2000 domain to assign the group that administrators are from and to assign appearances to. I never get the option to select from the NT4 domain. I would like to use the NT4 domain as that is where all my users and the groups they belong to reside. There is a 2 way trust between the domians.

 

[jtnewt]

I have found the solution. The restrict annonymous key under hkeylocalmachine\system\currentcontrolset\control\lsa has to be set to zero to allow polling of the accounts from the other domain. While this may go against some audit policies it does fix my problem