- Did you check the event viewer logs after updating the Windows AD plugin?
- Can try to add the service account in the domain admins group on the GAMES domain and then we will use CORP in CMC->default AD domain to fetch the users from all of the domains?
- This time add the service account in the Ad administration name as "BOserviceaccount@CORP.COM" form.
In response to your questions
1. Yes I did, but no errors or warnings given.
2. I have requested domains admin level access be given (temporarily) to or boq service user. This will no double trigger a "risk" from the security team, who will say "no way", but I will see if I can persuade them as a test whilst they watch over my shoulder. So they can see that I am not doing anything untoward.
3. Sure I will test if I can get 2. over the line.