When I change the password of a user that exists in both domains the primary domain updates correctly but the second domain fails with an error " Permission denied. Please contact your administrator.".  If I log in against the second domain and change the password it updates correctly.

Everything I've been able to find on this error says it's related to the ADSS Ploicies applied so I've check that the policies in each domain both allow "Change Password" and have the user OUs selected.

What am I missing? Do policies apply differently when there are multiple domains?

Cameron