RE: Can't browse shares in trusted domain from Client
- From: Manish <Manish@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Sat, 10 Dec 2005 13:52:02 -0800
Yes. SMB Signing plays a very critical role in Trusts between domains.
--
Microsoft Support Engineer
Microsoft Windows 2000/2003 Active Directory Services Specialist
"havefun" wrote:
> I resolved this issue to a problem in the Default Domain Policy for Domain B.
>
> It had the following settings.
>
> Microsoft Network Client: Digitally sign communications (always) -----
> disabled
> Microsoft Network Client: Digitally sign communications (if server
> agrees) ---- disabled.
>
> Microsoft Network Server: Digitally sign communications (always) ----
> disabled
> Microsoft Network Server: Digitally sign communications (if server
> agrees) ---- disabled
>
> While the DC's in Domain A had:
> Microsoft Network Server: Digitally sign communications (always) --- enabled
>
> Changed this to disabled allowed browsing of the shares on the DC's in
> Domain A from Domain B.
>
> I will need to resolve why Domain B had these particular settings, as I have
> just inherited it. But at least this particular issue is for the most part
> resolved.
>
> Regards,
>
>
>
> "havefun" wrote:
>
> > Hello,
> >
> > I have created a two-way trust between 2 domains in different forests. Each
> > domain is the only domain in each forest. I have validated the trust, and
> > everything checks out fine. Servers in Domain A are all running Win2003
> > Standard SP1, Servers in Domain B are running Win2003 Standard without SP1,
> > and Win2000 Standard SP4.
> >
> > I am not able to browse shares that are available on the DC's in Domain A
> > from clients in Domain B. However, I am able to browse the shares on the
> > DC's in Domain A from DC's in Domain B.
> > The client in Domain B allows me to log on as a user from either domain,
> > however, when I try to connect to a share on a DC in Domain A, I am given the
> > error message of "Incorrect password or unknown username", regardless of the
> > username and password given. This happens if I am logged on as a user from
> > Domain A, or Domain B. I am able to browse shares located in Domain A, that
> > are not on DC's, from client in Domain B
> >
> > I am able to browse shares on DC's and other computers in Domain B, from
> > both clients and DC's in Domain A, without any issue.
> >
> > Any suggestions on what to check to resolve the browsing problems from
> > clients in Domain B browing shares on DC's in Domain A?
> >
> > Thanks in advance.
> >
> >
.
- Prev by Date: Re: Concurrent Connections
- Next by Date: Re: Out of Sync Sysvol and AD
- Previous by thread: Re: Can't browse shares in trusted domain from Client
- Next by thread: LDAP queries to 2k and 2k3 - Operations error
- Index(es):
Relevant Pages
|
