It is possible to import objects from domain which is in some other forest than your console. You can also import data from untrusted domain, or domain your current domain doesn’t trust. You can even use console from another forest domain.
Data source address
Let’s say there is a domain you want to import objects from and this domain is not enlisted in
window (you won’t see that domain when you click
button). Then you need to specify data source address in the format shown below.
Address would be like this:
.If you don’t need to import objects from specific OU just skip
part in the address.
Run As account
To be able to import data from another domain you need to provide account which has permissions to read data from the specified data source.
Because of domain you are trying to connect is not listed in the
dropdown box you need to provide domain name in user name as shown on screenshot below.
Pay attention to the fact that when you provide domain name in
control is disabled.
After Run As account is created you can use it to connect to the specified data source.
With provided domain/OU address and Run As account you can choose which objects you want to import on
When you are trying to add individual objects to the connector configuration, the
window lists users, groups, computers or printers not from your current domain, but from domain you specified before on Domain/OU page.
There’s nothing special about untrusted domains – if need to import any data from one of them just provide an account which has enough permissions to read from specified address.
Console from another forest
You can have a console in a domain other than your SM Server domain. It’s even possible to have standalone console in domain which is not trusted by your SM Server domain. The only thing you need to keep in mind is that address you specify from you console should be also successfully resolved by SM Server.
Let’s say you have console in domain
and you need to create connector
which is in the same forest and observable from console machine when you click Browse button on
page. And you create connector for data source
. You can even create Run As account for
user and add individual objects to the connector filter.
But now with you SM server in another forest domain
neither address dom2.prod.net nor
(from Run As account) can be resolved. To solve the issue you need to specify data source address for connector
In other words when using console from another domain always remember about SM Server domain and it’s able to resolve address you provide and Run As Account you create.