RE: Can not see users in other domain

Hi Grog,

I tried to simulate your problem but couldn't reproduce it.

What I can think of now is

1. recreate the trust between the 2 domains again and reboot the servers

2. ensure that there is no firewall rules that block ldap traffic from going
out to the 2000 domain
http://technet2.microsoft.com/WindowsServer/en/Library/f5c70774-25cd-4481-8b7a-3d65c86e69b11033.mspx?mfr=true

3. look at this article and see whether it suits you
http://support.microsoft.com/kb/837328/en-us


"Grog" wrote:

From My windows 2003 domain when I tried to add NTFS permission on a file or
folder, I can see the two domains name (windows 2000 and windows 2003) but
when I choose the location windows 2000 domain, I can not browse the domain
and I can not see users. If I choose windows 2000 location and if I type an
existing username, it takes long time and I received the message server not
operational.

Thanks for you understanding

Gerard

"Wong Tuck Wah" wrote:

OK, I would like to know from where do you try to access the users/groups on
the trusted domain? Is it from the file/folder NTFS permission or while
trying to add someone as member to a group

A scenario might be this:
When you try to add users/groups from the 2000 domain to a global group in
2003 domain, because global group can only have members fromits own domain
and not other domains, therefore you don't see them.




"Grog" wrote:

Sorry, my explation seems to be not clear. It is a two way trust, this trust
has been successfully verified. But only windows 2000 domain can see the
users in windows 2003 domain. From windows 2003 domain when i try to change
location I can select the windwos 2000 domain but I can not see users or
groups.

Thanks in advance

Gerard

"Wong Tuck Wah" wrote:

From your description, it seems to be a one-way trust. with the windows 2000
beingthe trusted (account) domain, while windows 2003 is the trusting
(resource) domain.

But your problem appears to be otherwise, seems like the trust has been
created in the wrong direction.

Check the trust between the 2 domains again.

HTH.

"Grog" wrote:

Hello,

I have 2 domains, one in windows 2003 and one in windows 2000. I created
successfully trust between the 2 domains to give the right for user in 2000
domain to have acces on shares on 2003 domain.

My problem is : From windows 2000 domain, I can see the user located in 2003
domain , but From windows 2003 domain I cannot see the user located in 2000
domain.

Thanks for your help
.

Relevant Pages

  • Re: Can not see users in other domain
    ... Verify Dns settings, make sure that both domains can ping eachother by ... I can see the two domains name (windows 2000 and windows 2003) but ... When you try to add users/groups from the 2000 domain to a global group ... But your problem appears to be otherwise, seems like the trust has ...
    (microsoft.public.windows.server.active_directory)
  • RE: Can not see users in other domain
    ... when I choose the location windows 2000 domain, I can not browse the domain ... because global group can only have members fromits own domain ... "Grog" wrote: ... Check the trust between the 2 domains again. ...
    (microsoft.public.windows.server.active_directory)
  • RE: How to create trust relationship between Windows 2003 Server (domain controler) and Windows NT 4
    ... relationship between windows NT and Windows 2003 by following the ... Establish Trusts with a Windows NT-Based Domain in Windows Server ... How to Create a Trust Relationship ... Create a Two-Way Trust Relationship ...
    (microsoft.public.win2000.security)
  • 2003 to NT Domain Trust not working.
    ... the Windows 2000 domain. ... PDC tries to create a trust. ... The domain contains an NT Server 4.0 PDC, ... dom2K domain controllers. ...
    (microsoft.public.win2000.networking)
  • Re: Trust windows 2k to windows 2k3
    ... only reply to Newsgroups ... Having the trust running is the first step. ... it seems to validate outbound from my Windows ... On the 2000 create a secondary zone, correct, on the 2003 you ...
    (microsoft.public.windows.server.active_directory)
Loading