Re: Forest Two-Way Transative Trust Problem



Good job and glad to help.

--
Paul Bergson MCT, MCSE, MCSA, Security+, CNE, CNA, CCA
http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup

This posting is provided "AS IS" with no warranties, and confers no rights.

"CeridianMN" <amyhr674@xxxxxxxxxxx> wrote in message
news:1153407068.147128.300400@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

It's working!

So, I'm pretty sure it was the group policy settings that allowed the
access, and as a bonus the lmhosts/WINS that allowed connection via
name versus ip address.

In a situation where we were keeping them there on their domain longer
I would anticipate installing a second DC there and not having the
issue as the shared folders would no longer be on a DC. This would be
better practices and more secure.

I appreciate the help from you guys very, very much - you may have
saved face for our IT team in this merger. Everyone expects some
rockyness, but we were approaching three weeks and one of the two most
important pieces was still not working.

Again, thank you guys for the help and hopefully in the future someone
else can find the answer to a similar problem.

Adam


Paul Bergson wrote:
If you are using WINS be sure to check out the info from my article I
detailed earlier, the LMHost for the doman can be tricky.

To test things from the old domain to the new domain have you tried
NTFRSUTL version server_name
If communications are working properly you should get back the version
number of NTFRS

Did you check at the end of my article to see if the DC Group Policy
macthed
yours? If not I would suggest attempting to set it up this way. Just
make
sure to document any changes so you can revert back. These are all
changes
that were recommend to me by Microsoft a while back when I was working on
a
trust.

--
Paul Bergson MCT, MCSE, MCSA, Security+, CNE, CNA, CCA
http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup

This posting is provided "AS IS" with no warranties, and confers no
rights.




.



Relevant Pages

  • Re: Disapearing DC
    ... Please no e-mails, any questions should be posted in the NewsGroup ... This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Disapearing DC
    ... any questions should be posted in the NewsGroup ... This posting is provided "AS IS" with no warranties, ... Replace failing_dc_name with the name of the dc in this servers site. ...
    (microsoft.public.windows.server.active_directory)
  • Re: granting admin access to windows services
    ... MVP - Directory Services ... Please no e-mails, any questions should be posted in the NewsGroup This ... posting is provided "AS IS" with no warranties, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Orphaned 2000 DC
    ... any questions should be posted in the NewsGroup ... This posting is provided "AS IS" with no warranties, and confers no rights. ...
    (microsoft.public.win2000.active_directory)
  • Re: Retire a 2003 Domain Controller?
    ... MVP - Directory Services ... Please no e-mails, any questions should be posted in the NewsGroup This posting is provided "AS IS" with no warranties, and confers no rights. ...
    (microsoft.public.windows.server.active_directory)