• There are 3 trusted domains involved in our network. I'll refer to them as DomainA, DomainB, and DomainC


• All users are granted access and permissions through a domain group that resides on DomainA. I'll refer to this user as DomainA\DevGroup


• The account for the user in question resides on DomainB. I'll refer to this account as DomainB\DevUserA


• The 3 instances the user can access reside on either DomainA (the domain the group resides) or DomainB (the domain the user account resides)


• The 5 instances the user cannot access reside on DomainC

exec xp_logininfo @acctname='DomainB\DevUserA', @option='all';

account name		type	privilege	mapped login name	permission path
DomainB\DevUserA	user	user		DomainB\DevUserA	DomainA\DevGroup

exec xp_logininfo @acctname='DomainA\DevGroup', @option='members';

• When ran on any instance in DomainA the results yield all of the other 15 users


• When ran on any instance in DomainB the results yield only this 1 user


• When ran on any instance in DomainC the results yield all of the other 15 users