I have two forests, one domain in each forest, domain A and domain B. One way trust relationship is established.
Users are in domain A, resources are in domain B. The established trust relationship will allow users in domain A to access resources in domain B. To allow users to access resources, I need to setup domain local group in domain B, global security group in domain A. Add global group as a member of domain local.
Our process doesnt allow us to create security groups(global security groups) in domain A. How should I setup my AD security groups to allow users to access resources in domain B?