Cross Domain Group Policy issue

[Stuart_C]

I have a two domains set up, Domain1 and Domain2. There is a trust relationship between the two domains however I am having a slight issue with a single policy.

 

I have a user in domain1 who needs to log into a PC in domain2. I have configured ComputerConfiguration\Administrative Templates\System\Group Policy\Allow

Cross-Forest User Policy and Roaming Profiles. for the PC in domain2 and when the users logs in the receive the correct locked down desktop however the start menu is not re-directed.

 

In domain1 when a user logs into a PC the start menu is re-directed to a specific folder for that PC. Depending on which security group they belong to they get a slightly different start menu. This all works fine. When my user in domain1 logs into the domain2 PC they don't get a redirected startmenu, they dont get the comptuers full start menu they just get the one from %userprofile%\startmenu.

 

Why?

[adamf]

I had a simular problem with offline files and a user logging onto a machine where both user and computer are in different domains. I had a conflicting policy that was disabling offline files which turned out to be the problem.

 

Have you done a rsop or gpresult to see what is actually being applied?

[Stuart_C]

I've tried but I can't run cross forrest planning from either domain!

[adamf]

What does it do when you try? Do you get an error msg?

[Stuart_C]

Nothing as far as I can see. Just doesn't re-direct the start menu. That seems to be the only thing that goes wrong. The rest of the policy applies correctly...

Although as I type this I've just had an idea about permissions... Let me have a look and get back to you.

[Stuart_C]

Nope. Thought it might be to do with permissions on the folder with the start menu. It's on the local disk and if the user is in a different domain... but that didn't seem to work when I changed the folder permissions.