Strange Logon Problem

dwilson_at_rlc.edu
Date: 11/09/04


Date: Tue, 09 Nov 2004 10:13:18 -0600

I am having troubles getting Windows XP computers to access resources
in a child domain. I have added the user(s) & groups to the share
permissions and given them the appropriate NTFS rights. The user
authenticates to a parent domain and the logon script attempts to map
a drive to the share in the child domain. The logon script asks for
the username/password for a username; however when you enter the
username/password it does not work- system error 1326.

When I check the security log on the child domain's DC (only one
server in this domain), I see an Event ID 529.

However, here is the STRANGE part. If I attempt to logon as myself
using an XP computer I get the error mentioned above. When I logon as
myself using a Windows 2000 member computer I am able to logon fine
and the logon script will map the drive.

To complicate matters even more; I decided to do some testing and
reversed the scenario (logon to child domain, access share in parent
domain) - it worked fine.

I am running Windows 2003 servers & domain controllers in Windows 2003
mode. The forest is in the highest mode possible. Both domains are
part of the same forest.

Any help would be appreciated.

Thank you,
Dave



Relevant Pages

  • Re: Remove a domain from domain drop down list.
    ... I've got contoso.local as the forest root, marketing.contoso.local as a child domain and payroll.contoso.local as another child domain. ... I want to hide the forest root domain so that users in the child domains can't see them in the domains drop-down list when they do a ctrl-alt-del. ... them all to logon with a friendly e-mail style UPN suffixed logon that hides the domain names and structure completely from them. ... Because users are idiots and they will attempt to logon with their email address rather than their domain address. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Remove a domain from domain drop down list.
    ... I've got contoso.local as the forest root, marketing.contoso.local as a child domain and payroll.contoso.local as another child domain. ... I want to hide the forest root domain so that users in the child domains can't see them in the domains drop-down list when they do a ctrl-alt-del. ... them all to logon with a friendly e-mail style UPN suffixed logon that hides the domain names and structure completely from them. ... Because users are idiots and they will attempt to logon with their email address rather than their domain address. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Remove a domain from domain drop down list.
    ... I've got contoso.local as the forest root, marketing.contoso.local as a child domain and payroll.contoso.local as another child domain. ... I want to hide the forest root domain so that users in the child domains can't see them in the domains drop-down list when they do a ctrl-alt-del. ... all to logon with a friendly e-mail style UPN suffixed logon that hides the domain names and structure completely from them. ... Because users are idiots and they will attempt to logon with their email address rather than their domain address. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Strange Logon Problem
    ... > I am having troubles getting Windows XP computers to access resources ... > authenticates to a parent domain and the logon script attempts to map ... > a drive to the share in the child domain. ...
    (microsoft.public.win2000.active_directory)
  • Re: Logging on more than one Domain
    ... >> If you want to access resources of other domains while logged into ... >> able to logon to them. ... That is controlled at the Domain Controller Server, ... which I guarantee you is NOT running any version of Windows XP. ...
    (microsoft.public.windowsxp.general)

Loading