Grant user from one domain permissions to shared folder in another domain

Question

I have two computers set up like this:

• \\myPC (local Windows 7 SP1 machine); it is in domain1;
• \\remotePC (Win Server 2008 with SQL Server - a HyperV virtual machine); it is in domain2.

In domain2 active directory, I have a user account RemoteAccount. I would like to give this account full permissions to a shared folder located on \\myPC, i.e. folder \\myPC\SharedFolder.

The problem is, when I right-click the folder and go to sharing permissions, I can't add permissions for the domain2\RemoteAccount user, because this user cannot be found - I can only see domain1 users. When I click 'Locations' in "Select users, computers, service accounts, or groups" dialog, I only see domain1.

Is there a way to do this?

Solution

You need to create a trust between the two domains. At a minimum, a one-way trust where the domain that your computer is in must trust the other domain will need to be created.

Comments

[MDMarra]

I didn't downvote this, but I would be very careful about recommending that people blindly use Users or Authenticated Users in ACLs if you don't know their exact requirements.

[w128]

This seems to be to the correct answer, but unfortunately it looks like I'm unable to create a trust - to do it, I'd have to be a domain1 administrator, which I'm not (I'm a local machine admin, but not a domain admin - and it fails to create a trust with these credentials).

[Steve Schofield]

This person could run process monitor and find out exactly what user and grant permissions on that user or create a group and add that user within the group.