Here's my scenario: Domain-A is primary, Domain-B is a child domain. WS is my workstation running a password reset application.
I need to create an account on the Domain-A that will allow the WS application, to change or reset passwords on botht he Domain-A box and Domain-B.
Essentially, this application uses LDAP and the Global Catalog to search for Users on both the primary and child domains and reset or change passwords as required. However, I haven't figured out how to create an account with proper access to both domains.