Can anyone confirm for me what the permissions/abilities child domain users have for the parent domain, by default?
A normal user account in the child domain, which is only a member of groups in the child domain, by my thoughts I believe the following:
- They will be able to browse the domain, see a list of devices using Explorer or "net view" etc.
- They will be able to access shares that are configured for "everyone" or "authenticated users", as both of these include accounts in the forest, not domain.
Can someone confirm the last item above?