To allow webNetwork to talk to a child domain in Microsoft Active Directory you will want to first make sure your child domain is up and running and that you have run DNSLINT to verify your Active directory DNS names and server communication.
Next create some users using the native Microsoft users and groups tool.
After you have some users in that child domain, take a LDAP browser (you can find one in \stoneware\util\java) and connect to the address you have configured for webNetwork. This can be found on the 8090 management console on the webNetwork server (aka: loader) under the directory tab in the Host Address box. Use the username listed in the Admin Account box. Make sure you can browse the tree and navigate down to the child domain and read the objects you created.
Next in the webNetwork 8090 console on the webNetwork servers, you need to enable the Multi Domain support check box on the Directory Services configuration section (advanced section)
You will also need to make sure that you have enabled the Global Catalog check box and the address is the same as what you have configured for Host Address.
You will also need to make sure that the user used for webNetwork is in the enterprise admin group so it can communicate with the new child domain.
Save your configuration and restart webNetwork.
You will then want to go back into the 8090 console and run an environment check. This is located on the Directory tab, under the Show Advanced section. This will check your environment out for inconsistencies in DNS that may cause us problems. You should strive to not have any errors when looking at the output.
Finally use web Admin to browse and walk the tree down to those new child objects and verify you can modify them.