Alle domains are member of the same forest, all have been created with DCPROMO as subdomain of the root. So now manual trusts. This also implies that we have a full transitive trust even accros domains. The domains are running in W2K3 native mode.
The scripts are pulled from one of the users domain controller. Not from the forest root and not from the DC´s of the machines domain.