Consider how users will access resources. When multiple servers host the same published application, users could be connected to any of these servers when they access the resource. Therefore, if a user does not have permissions for all servers, the user might not be able to access the resource. To avoid these issues, you might need to establish domain trust relationships between users or servers.
Also, in a farm with multiple, untrusted domains, when servers are load balanced, users can be routed to a server in a domain in which they do not have access permissions. To ensure your users are routed only to servers in domains in which they have access permissions:
- Publish copies of an application in each domain, and allow users access only to the copy of the application in the domain in which they have access permissions.
- Create a Worker Group Preference and Failover policy that routes users to servers in domains in which the users have access permissions.