none
centralized user management for mutliple Active Directory forest

    Question

  • Hi,

    is there a solution to manage users in more then one AD forest like trust and what is the best software / way  to accomplished this task?

    What i need, is a solution for Hosting to administrate accounts in more then one Forest Domain.

    i will appreciated any answer.

    Best regards

    Tuesday, November 19, 2013 9:18 AM

Answers

  • You can use Active Directory Administrative Center in Windows Server 2008 R2 or later to administer multiple domains in different forests as long as the forests trusts each other:
    http://technet.microsoft.com/en-us/library/dd560632(v=ws.10).aspx

    If trusts isn't an option I recommend to go for a IdM system like ForeFront Identity Manager (FIM) that allows and agent to be setup against each forest, but this involves an entire IdM project to be kicked off.

    Enfo Zipper
    Christoffer Andersson – Principal Advisor
    http://blogs.chrisse.se - Directory Services Blog

    • Marked as answer by SSorin Tuesday, November 19, 2013 1:02 PM
    Tuesday, November 19, 2013 9:40 AM

All replies

  • You can use Active Directory Administrative Center in Windows Server 2008 R2 or later to administer multiple domains in different forests as long as the forests trusts each other:
    http://technet.microsoft.com/en-us/library/dd560632(v=ws.10).aspx

    If trusts isn't an option I recommend to go for a IdM system like ForeFront Identity Manager (FIM) that allows and agent to be setup against each forest, but this involves an entire IdM project to be kicked off.

    Enfo Zipper
    Christoffer Andersson – Principal Advisor
    http://blogs.chrisse.se - Directory Services Blog

    • Marked as answer by SSorin Tuesday, November 19, 2013 1:02 PM
    Tuesday, November 19, 2013 9:40 AM
  • Thanks for your replay, i appreciated.

    Best regards


    Tuesday, November 19, 2013 1:02 PM