Return
-
Title
How to create a Search with Active Directory objects from two Forests -
Description
Administrators may want to create a Search that contains Active Directory (AD) objects (such as OU or User) from two Active Directory Forests. However, when using the ChangeAuditor Client to navigate and select the AD objects, only AD objects from the same AD Forest as the ChangeAuditor Client\ChangeAuditor Coordinator are viewable. -
Cause
N/A -
Resolution
WORKAROUND:The steps below assume that the multi-forest deployment of ChangeAuditor has a ChangeAuditor Coordinator in each AD Forest and the ChangeAuditor Coordinators share a single ChangeAuditor database.- In the ChangeAuditor Client connected to the ChangeAuditor Coordinator in Forest A, create a Search in the Shared Folder
- On the What tab, Select the drop-arrow next to the Add button and Select Add | Subsystem | Active Directory...
- Select the required Scope
- Select the desired object
- Click the Add button
- Click OK
- Close the Change Auditor Client
- Re-open the ChangeAuditor Client connecting to the ChangeAuditor Coordinator in Forest B.
- Select the Search in the Shared Folder created in Step 1
- On the What tab, Select the drop-arrow next to the Add button and Select Add | Subsystem | Active Directory...
- Select the required Scope
- Select the desired object
- Click the Add button
- Click OK
The Search will contain objects from both AD forests and can be run from the ChangeAuditor client in either AD Forest.Note : Sometimes customer asks that can they have 1 coordinator for many forests, which is not possible. They can have common DB, but for each forest, coordinator should be there.STATUS:Enhancement request TF00504572 has been submitted to Development for consideration in a future release of Change Auditor. This enhancement is to have the ability to select objects from other forests from the object picker in the client. -
Defect ID
TF00504572