Hi,
I create two way external non-transitive trust between two domains - DOMAIN1 and DOMAIN2. Everything was working fine. I was able to add administrators from DOMAIN1 to DOMAIN2 and the friendly name was shown. Then we decide to secure the connection so only DOMAIN1 users can log in to DOMAIN2, DOMAIN2 users should not have access by default to DOMAIN1.
On DOMAIN1 i changed the outgoing and incoming trust to DOMAIN2 from DOMAIN-WIDE AUTHENTICATION to SELECTIVE AUTHENTICATION. Everything is working fine but now in DOMAIN2 in members if group i can see users from DOMAIN1 as SID, no common/friendly name.
The problem does not exist in opposite dirrection. I can see friendly name of DOMAIN2 users in DOMAIN1
I tried to enable Network access: Allow anonymous SID/Name translation on DOMAIN2 but it did not help, any ideas?
Regards / Mateusz