Thanks for the information, but I am still struggling to get this to work. I am trying to set this up as shown below.

Root domain - flintstone.org

Child domain 1 - fred.flintstone.org

Child domain 2 - wilma.flintstone.org

Primary LDAP - dc1.flintstone.org

Root - dc=flintstone, dc=org

Use Global Catalog - checked

Username - vCO@fred.flintstone.org

User lookup base - dc=flintstone, dc=org

Group lookup base - dc=flintstone, dc=org

vCO Admin Group - cn=vCOAdmins, OU=AdminGroups, dc=fred, dc=flintsone, dc=org

If I apply those settings then I am told that the vCO@fred.flintstone.org is not a member of the vCO Admin group even though it is and my Plug-ins settings shows an error. If I login using the vCO client then I cannot find any virtual machines when I try and run a simple workflow such as the Extract VM Information workflow.

What I am trying to achieve is to allow users from both the fred.flintstone.org and the wilma .flintstone.org domains to use vCO. Can you please tell me if my configuration looks right or if I am making some obvious error?

Thanks,

Dave.

The vCO user is a member of the vCOAdmins group and the domains are child domains of the root domain as shown below.

flintstone.org

/ \

fred.flintstone.org wilma.flintstone.org

The vCOAdmin group is in the fred.flintstone.org child domain.

What I am trying to achieve is for users in both of the child domains to be able to use Orchestrator.

I have configured the vCentre plug in and if I set the search paths to start at the fred.flintstone.org level then it works, but users from the wilma.flintstone.org child domain cannot use Orchestrator.

Thanks for your time and effort in looking at this.

Regards,

Dave.