Foreign Group Membership

Enumerate foreign security principals in groups and users' memberships across trusted domains. Foreign security principal objects represent external security principals and allow them to be members of groups in the local domain. These observations identify candidate cross-domain authorization paths; membership alone does not guarantee access, which also depends on trust direction, trust authentication controls such as selective authentication, and permissions on the target resource.