I have an external domain in another country that up until recently was completely separate from our corporate domain. We have a Cisco PIX set up there that tunnels to our location to access e-mail, file shares, etc. When the users there would access e-mail here through Outlook, they would be prompted for credentials and have to enter their credentials for the corporate domain, which were separate from their credentials at their overseas office. We recently established two-way communication over the PIX firewall vpn tunnel so we were able to establish a cross-forest two way trust between our domains. So now we are working toward eliminating the need to enter domainA credentials when accessing domainA exchange accounts from domainB computers. I gave domainB users full mailbox access to their domainA exchange mailboxes and they were able to see all their e-mail but were unable to send e-mail. I tried giving permissions of send as and receive as to domainB users but it still doesn't work. What am I missing here to allow the domainB users to access their domainA exchange accounts without needing to enter domainA credentials since the two-way forest trust now exists between the two locations? Please help! Brian TASAdmin bgeorge@tas.com

Hi, This might help: http://support.microsoft.com/kb/322890/en-us Leif

That would be helpful if these users never needed to use their domainA accounts, but when they're on the road traveling, they still VPN in to domainA so those accounts need to stay active and cannot be disabled. Is there any way to do it and keep their domainA account active and them be able to access and send email from their domainB account?

Hi, This article explains it in another way: http://support.microsoft.com/kb/278888 Leif