Jump to content
Welcome to our new Citrix community!
  • 0

Studio console cross forest visibility


markovic dejan

Question

Hi,

 

Our security team is implementing a domain for admin activity.

 

Lets take some asumption:

 

  • A is the admin domain.
  • B is the production domain.

 

The domain approval is uni-directionnal from A to B.

 

When logged on domain A, I'm able to launch 'DSA.MSC' and connect to domain B. Then, B domain is visible and I could manage different things (users, machines, gpo and so on).

 

When I use citrix studio on admin server from domain A, I could target my DC on domain B.

I could administer it with basic tasks except something related to domain accounts.

Whenever I try to change some AD groups (published visibility for example), only the default domain A is visible for query.

 

image.thumb.png.5c9ff44366c8d32481c28ebdc9871d87.png

 

I could not change domain target like I do with 'dsa.msc'. It stick to my current active default A domain.

 

If I launch studio in B domain context, I could see both domains.

I did not understand what the problem is as I could change domain view in other consoles ('policy' or 'machine / users accounts' consoles) without any issue. I can't through studio.

 

Any idea ?

Link to comment

0 answers to this question

Recommended Posts

There have been no answers to this question yet

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...