0

I have the following scenario:

Domain company.com has two subdomains: a.company.com and b.company.com. The users are in both subdomains (mixed) but the technical user is only in a.company.com and has permissions on b.company.com as well as the domains are trusted.

When I try to generate a PrincipleContext as:

var oPrincipalContext = new PrincipalContext(ContextType.Domain, "b.company.com", null, ContextOptions.Negotiate | ContextOptions.Signing | ContextOptions.Sealing, "TechnicalUserName", "TechnicalUserPassword");

I get message that the user "TechnicalUserName" does not exists in "b.company.com". The message is okay but the user "TechnicalUserName" exist in "a.company.com" and has full privileges over "b.company.com"

The reason I have a technical user for creating PrincipleContext is because that context will be privileged to reset, change, and unlock other user active directory accounts.

What am I missing here?

DoomerDGR8
  • 4,840
  • 6
  • 43
  • 91

2 Answers2

1

How about passing "TechnicalUserName@a.company.com" instead of just "TechnicalUserName"?

baldpate
  • 1,707
  • 1
  • 14
  • 23
1

According to this post PrincipalContext does not support cross forest lookups and you'll need to use a DirectoryEntry/DirectorySearcher instead.

Community
  • 1
  • 1
codingChris
  • 697
  • 4
  • 8