General access denied error while reading AD of domainB while logged in on DomainA

[Tim]

Hi all,

Does anyone know what kind of permissions are required in order to
read the Active Directory of domain B while being logged on to domain
A? I try to determine the cause of the error "General access denied"
in
the following scenario:

- The user is using a Visual Basic program that is using ADSI
- The VB program reads the AD, like the code example below, and it
lists all domain users
- The VB program runs using the credentials of the user currently
logged in
- The user is logged on to domainA
- The user has Read access on domainB
- The user wants to read the AD users of domainB
- The program does not modify any user attributes, it only reads some
user attributes

===CODE===
Set objContainer = GetObject("WinNT://DomainB")
objContainer.Filter = Array("user")
...Loop through the list and display some user info....
===

Thanks a lot for any suggestions...
Regards