AD SYNC from what Domain

[Roger Meyer]

We are currenlty moving from an old AD Domain to a new one. We currenlyt
have the two Domain syncing to each other. How do I know which Domain/Tree
that the AD sync is pulling from? Is this based off of what Domain the
server is attached to?

 

[Paul Conroy]

It will be from the local domain of the SSP unless specified otherwise in the
format of securitygoup@otherdomain

 

[Roger Meyer]

So the domain that the server is currently attached to is the domain that is
uses to pull the AD groups from. Thanks for the help.

I am a little confused by your last statement of it being specified. Can
you elaborate a little more on this please?

 

[Paul Conroy]

Project Server 2007 support cross forest/domain AD sync, so it can sync with
a security group in another domain/forest. To specify another domain or
forest you must use the syntax securitygroup@domain instead of just the
securitygroup name.

The SSP user account will need the AD read object permission in the foreign
domain.