Transitive Trusts - Some in theory questions

[CHR1S]

I have a CC4 DC (2003 R2) and a Vanilla DC (2003 R2) which has a transitive two way relationship set and active between the two domains.

I want my CC4 users to be able to log on to the Vanilla PCs AND have the vanilla security policies apply instead of the CC4 policies and be able to map the CC4 drives without recreating the users on the Vanilla DC.

Am I correct in thinking this is possible?

NB - the short of it is I want to add some PCs that dont have CC4 on them but a lot of security is set on the user that is unique to CC4 and I wish to strip it.

[CHR1S]

So logging onto a CC4 user on a Vanilla domain (choosing the CC4 domain) strips the security.

Just need to figure out how to apply per user security based on a transitive user now.

[CHR1S]

Or, you could just use the CC4 domain and apply a loopback policy set to replace and bobs your mothers brother! simples