Honestly, I personally don't know of any other way without having to perform some obscure hacks. You're talkign about hacking active directory which is well beyond what is discussed here on these forums. I'm only telling you the right way that wouldn't require some special magic, its also much easier. I mean, we are talking about allowing the internal domain to be trusted by the external, not the intranet trusting the internet users, this method is secure so why are you so afraid to do it this way?