Re: Can't browse shares in trusted domain from Client

In news:10ABDE39-C27E-46F9-9C0F-215FB391671B@xxxxxxxxxxxxx,
havefun <havefun@xxxxxxxxxxxxxxxxxxxxxxxxx> stated, which I commented on
below:
> Hello,
>
> I have created a two-way trust between 2 domains in different
> forests. Each domain is the only domain in each forest. I have
> validated the trust, and everything checks out fine. Servers in
> Domain A are all running Win2003 Standard SP1, Servers in Domain B
> are running Win2003 Standard without SP1, and Win2000 Standard SP4.
>
> I am not able to browse shares that are available on the DC's in
> Domain A from clients in Domain B. However, I am able to browse the
> shares on the DC's in Domain A from DC's in Domain B.
> The client in Domain B allows me to log on as a user from either
> domain, however, when I try to connect to a share on a DC in Domain
> A, I am given the error message of "Incorrect password or unknown
> username", regardless of the username and password given. This
> happens if I am logged on as a user from Domain A, or Domain B. I am
> able to browse shares located in Domain A, that are not on DC's, from
> client in Domain B
>
> I am able to browse shares on DC's and other computers in Domain B,
> from both clients and DC's in Domain A, without any issue.
>
> Any suggestions on what to check to resolve the browsing problems from
> clients in Domain B browing shares on DC's in Domain A?
>
> Thanks in advance.

After creating a trust, in each domain, add the Domain Users from the other
domain to the local Users domain local group. If WINS is installed, or
setup WINS if each domain is on a different subnet, and allow ALL machines
to use it.

When authenticating, provide the domain\username and the password when
authenticating.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Windows Server Directory Services
Microsoft Certified Trainer
Assimilation Imminent. Resistance is Futile.
Infinite Diversities in Infinite Combinations.
=================================


.

Relevant Pages

  • Re: WIN 2000 domain trust
    ... Trusts between two forests in W2K require netbios name resolution. ... wins in each forest make sure the domain controllers are also wins clients and that ... > trust between domains in seperate forests, ...
    (microsoft.public.win2000.networking)
  • Re: Presenting concatenated volume to new domain
    ... Jorge Silva wrote: ... Assuming that the shares are in the old domain, you'll be fine as long as the trust is up between both forests. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Presenting concatenated volume to new domain
    ... Assuming that the shares are in the old domain, you'll be fine as long as the trust is up between both forests. ... MCSE, MVP Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: Active Directory access within two forest.
    ... Creating a trust is only part of the process. ... If you have used domain local groups or universal groups to grant access to shares and NTFS partitions, you could simply add groups from the other domaininto this group. ... The clinton.com domain and lapeer.com domain both have a file server that I ...
    (microsoft.public.windows.server.active_directory)
  • Re: Will native mode cause...
    ... The switch to native mode does not affect trusts or clients. ... > I have some remote NT domains that trust this domain. ...
    (microsoft.public.win2000.active_directory)