Re: External Trust Question

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Can we identify whether it is a communication problem or a trust problem?
What happens if you use ADUC from site A but with Run As a domain B admin?
Anthony



"will gerrish" <willgerrish@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6F7F1E55-B41F-4976-8092-1553CECAA7E9@xxxxxxxxxxxxxxxx
Hi Jorge thanks for the reply.

Its a two way trust with domain wide authentication.

Guys if anyone could post a couple more things to look for i would be most
greatful. If you need anymore additional info let me know.

thanks again jorge

"Jorge Silva" wrote:

Hi

does this trust have 2 way direction, you should also check if you have
selective authentication or domain wide authentication.

--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator

"will gerrish" <willgerrish@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:EE79188C-20D7-42AB-8093-871E6B6D8BDC@xxxxxxxxxxxxxxxx
I have 2 domains domainA.com and DomainB.com and both of then have the
domain
functional level of 2003 and the forest function level of 2000.

Now with the use of a VPN i've setup an external trust between the to
domains. From domainB.com everyting looks likes its working, i can add
users
from domainA.com to resources in domainB.com - Using the mmc snap-in i
can
connect to AD in domainA.com from domainB.com - i can add users and
groups
from domainA.com to domain local groups within AD on domainB.com.

So as you can see i can do pretty much everything that i need on
domainB.com
but domainA.com is a different story.

From domainA.com i cant add users from domainB.com to resources in
domainA.com - cant connect to domainB.com's AD - cant add users or
groups
from domainB.com in to domainA.com AD.

Also when trying to connect to domainB.com's AD from domainA.com it
comes
up
with the following error

"windows cannot connect to the new domain for the following reason: the
server is not operational"

Also when trying to search for a user to add to a domainA.com resource
from
domainB.com the select User, Groups or Computers box comes up with the
following error similar to the one above!

"the following error prevented the display of any items: the server is
not
operational"

DNS is setup using condidtional forwarding and from both domains i can
ping
FQDN and IP address.

Could someone help me again?

thanks

Will






.

Relevant Pages

  • Re: External Trust Question
    ... selective authentication or domain wide authentication. ... Now with the use of a VPN i've setup an external trust between the to ... from domainA.com to resources in domainB.com - Using the mmc snap-in i ... domainA.com - cant connect to domainB.com's AD - cant add users or groups ...
    (microsoft.public.windows.server.active_directory)
  • Re: External Trust Question
    ... Its a two way trust with domain wide authentication. ... from domainA.com to resources in domainB.com - Using the mmc snap-in i ... domainA.com - cant connect to domainB.com's AD - cant add users or groups ...
    (microsoft.public.windows.server.active_directory)
  • RE: question about creating an external domain trust Server 2003
    ... You would Create accounts in the Trusted ... domain and put them into groups to access foreign resources. ... NETDOM to create the trust. ... F1child to be used on the webserver. ...
    (microsoft.public.windows.server.active_directory)
  • Re: trust relationships between windows 2003 domains
    ... I already created trust relationships between 2 domains and have validated ... never expect to access resources unless you have IP ... Unless your ping issue is a Firewall problem (intermediate, ... Properties to find the DNS server for the zone ...
    (microsoft.public.windows.server.active_directory)
  • Re: ASP.NET hosting & MS Access
    ... > the only way to let a partial trust web app access OLEDB sources is ... > My understanding was the OLE DB and ODBC data resources demand full ... > We can't use a custom policy. ... how can we allow users to use OLE DB and ODBC data ...
    (microsoft.public.dotnet.framework.aspnet.security)