Connecting to Multiple Domains

Question

We have 2 domains, SharePoint 2010 is installed on one Domain. We need a group of users from the other Domain to access SharePoint. What steps are needed to set this up?
dfrancis

Answer 1

If this is a child domain of the existing forest, you won't need to do anything. If it is a second forest, you'll need to create a trust in Active Directory Domains and Trusts. Given it is a two-way forest-wide trust, you won't have to do anything.
If it is a one-way trust, you'll need to do some PowerShell work.
http://thesharepointfarm.com/2014/01/powershell-for-people-picker-properties/
Namely execute this once:
$key = ConvertTo-SecureString "Password1" -AsPlainText -Force
[Microsoft.SharePoint.SPSecurity]::SetApplicationCredentialKey($key)
And for each Web App:
$wa = Get-SPWebApplication http://webAppUrl
$adsearchobj = Microsoft.SharePoint.Administration.SPPeoplePickerSearchActiveDirectoryDomain
$userpassword = ConvertTo-SecureString "UserPassword1" -AsPlainText -Force #Password for the user account CONTOSO\s-useraccount
$adsearchobj.DomainName = "contoso.com"
$adsearchobj.ShortDomainName = "CONTOSO" #Optional
$adsearchobj.IsForest = $true #$true for Forest, $false for Domain
$adsearchobj.LoginName = "s-useraccount"
$adsearchobj.SetPassword($userpassword)
$wa.PeoplePickerSettings.SearchActiveDirectoryDomains.Add($adsearchobj)
$wa.Update()
In addition, regardless of the type of trust, SharePoint servers must have port access to the other domain's Domain Controllers. See http://blogs.technet.com/b/wbaer/archive/2009/01/21/people-picker-port-protocol-requirements.aspx
for details on requirements.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.