search for: trusted_sysadmins

...ay I would like it to work. Situation: I have two AD domains (2012R2), DOM-A and DOM-B. I have elected to not use any SFU or RFC2307 extensions as MS has depreciated those features. DOM-A has a group, "sysadmins", which has users in it. DOM-B trusts DOM-A. DOM-B also has a group "trusted_sysadmins", the member of which is DOM-A\\sysadmins. My host is to be a member of DOM-B. I can join it to the domain just fine, and authentication works for both DOM-A and DOM-B accounts. However winbind is not producing any group information for DOM-A accounts other than "DOM-A\\Domain Users&qu...