My server farm is a member of domain1, and I have external users with accounts in domain2. Both domains are on the local LAN. How doI grant view access to users from domain2? I tried to just add them via people and groups but it does not appear that it is able to resolve usernames on the external domain. My knee jerk reaction is that a trust is required between the two domains... but I thought I would ask first.

Also the apps are already published with FQDN's cheers!

hello, I am not an expert on AD, but ask your system administrator to create a "trust relationship" policy between your two ads. Regards, Noureddine

Yes, you need a trust set up between the two domains for this to work. Linda

Is it so (trusts needed)?In this article, there is third option, but it is poor documented. If enyone has experiences with such case,I would glad to hear his/her experiences.I have SBS servers around so I can not have trusts :-(.http://technet.microsoft.com/en-us/library/cc262051.aspxMitjaMitja

To solve this problem what I ended up doing was establishing a one way trust, creating a user in the external domain that had read permissions to the external AD, keying the passwords on the WFE's, then added the external domain to the people picker with the correct username and password. STSADM.exe -o setproperty -pn peoplepicker-searchadforests -pv domain:DnsName,user,password -url http:// webapp