Supporting Multiple Windows NT Domains

Windows NT supports multiple security domains. This section describes how to set up Index Server to index computers in different Windows NT domains. The following diagram shows a site with three domains.

Trust Relationship among Domains A, B, and C

In this site, Microsoft® Internet Information Server (IIS) and Microsoft Index Server (IXS) are running on Server A, which is in Domain A. Server A is connected to the Web. Domain A must be trusted by Domain B and Domain C.

For this example, assume you want to set up virtual roots on Server A for the following Uniform Naming Convention (UNC) paths:

Assume a single user ID, Domain\WebUser, has permission to connect to the four shares.

To configure Index Server for these assumptions

  1. On Domain A, create the WebUser account. Open User Manager for Domains, and add WebUser as a new user on the domain controller for Domain A.
  2. Add DomainA\WebUser to the list of accounts having interactive logon privileges on Server A. User Manager for Domains can check to see if a user has Interactive logon privileges.
  3. Stop the Content Index Service, which also stops Index Server.
  4. Restart the Content Index Service, which also starts Index Server and starts indexing the documents on all the virtual roots.
  5. Start Internet Service Manager, and add the virtual roots to the UNC shares listed under the first assumption in the previous section. In the User Name box, you must specify the full user ID in the form domain\user-id (DomainA\WebUser, in the example). The backslash is important.
  6. Repeat step 3 for all the UNC shares you want to add.

If you have had problems with remote virtual roots before starting this procedure, you should delete the contents of your Catalog.wci directory after step 3. Removing the contents of this directory starts Index Server with a clean set of data.

Note   This procedure can also configure multiple accounts.

© 1997 by Microsoft Corporation. All rights reserved.