Re: Universal Group Problem

Tech-Archive recommends: Fix windows errors by optimizing your registry

Plenty of suspicions, but I'd say for now you just need to watch it closely.
You may want to just reset the trust next time and see if that helps.
My best guess is that you had a problem with the shortcut trust and instead
were able to traverse the forest trust (the long way).
No way to know without seeing it though, right?

Check the logs on the DC's though, just in case you were able to pick that
up somewhere in there.

Al

"COT-AD" <COTAD@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2A39CAB0-EB90-4D23-B0D1-1779D5DDCAE2@xxxxxxxxxxxxxxxx
This turned out to be a problem with a two way shortcut trust. We removed
the shortcut trust and was able to access the test share using the test
user.
We put the two way shortcut trust back in place and was able to connect to
the share. I'm not sure why this worked but it did. Thoughts?

"Al Mulnick" wrote:

Help me understand here: you were able to successfully give rights using
the
method? How's that help with the problem you were describing, or am I
missing something?

Also, what's the trust hierarchy of this forest? Is this all the same
forest?

"COT-AD" <COTAD@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:7CAE7AE1-16CA-4225-80BB-492DBD37B77B@xxxxxxxxxxxxxxxx
I created test users in Domain C and Domain D. I put the test users in
the
same Universal group in Domain A. I was able to access the resource
with
the
test users from Domain C and D.

I created a new Universal group in Domain C. I used test users in
Domain
A,
B, and D. The test users are members of the universal group in Domain
C.
I
assigned rights to the universal group in Domain C to a resource in
Domain
C.
I was able to gain access to the share using all test users.

The only upgrade I'm aware of is the Exchange 2003 project. Thoughts?

"Al Mulnick" wrote:

What have you done to troubleshoot?
Any upgrades lately? Other changes?

"COT-AD" <COT-AD@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2C74AAA0-9EA0-4FF6-A0BC-468BBB24E568@xxxxxxxxxxxxxxxx
We are having an issue with permissions related to universal groups.
We
have a universal Group in Domain A. We have users in Domain B that
are
members of the universal Group in Domain A. We assign rights to the
universal group in Domain A to a resource in Domain A. When a user
in
Domain B tries to access the resource, they receive an access denied
message.
Thoughts?









.

Quantcast