Users of Two domain access to QVS

[Emmanuelle__Bustos]

Hello Community

I have one case:

Having two domains A and B, and the QVS is installed in a Doamin A.

The users from Domain A can access without a problem, but the users in domain B cannot access, when they open the accesspoint they are prompted for credentials but can't be signed in (a Login Failed always is shown up).

I have aded the users from Domain B into Users Group in Windows Server (QVS at Domain A) and even gave them permission over the Document's folder (qvw's) but the issue remains. I solved the issue adding all the Domain B uses to the Administrator Group in the Windows Server (QVS at Domain A), as we know this is not the best practice give such permission to all users, so i test removing them from Administrators Group and adding them to the Powers Users Group and this works too.

My question is If this is the best practice or what should i do to improve this scenario?

[#2]

Hi Emanuel,

have you updated DSC Active Directory setting with corresponding  AD of Domain B?

regards

[Emmanuelle__Bustos]

hi Krunoslav Pap

No we did only with Domain A, but as i know the DSC is only for retrieve names of users to assig licenses but as we have checked the Allow Dynamic CAL assignment this should be a problem but anyways we try to add this thank you

[dde]

Note that the DSC is also used for group resolution.

[Bill_Britt]

You try adding all authenicate user from Domain B to the fold security? They will need access to this also. I would go to the document folder and qlick on one of the qvw's. The right click>properties>Security Then at the bottom click on Advance and then Effecttive Permissions and then select and enter the users name and check it and hit OK and see what rights it has.

[Emmanuelle__Bustos]

Hi Bill Britt

We already tried this giving permission to the each users from Domain B, even adding the "Everyone" access but the result is the same, we tried sharing all the files as well but issue remains, as i know this is to allow users to see the qvw at accesspoint, but the issue in here is that users can't even access to the accesspoint, (Signing Failed). The only way to give access to users from domain B is adding them to the Group Administrators or Power Users, for users in Domain A this is not necesary.