Re: Testing configurations

What are you trying to access? Shares or ... ?

Let say you are using shares. If share on DC1 has permissions "Everyone
Read" then Any user will have read permissions while if DC2 share only has
"Domain Users Read" permissions it will only allow users from DC2's domain
to access the share...

Since you have two domains not all information will always be replicated
between the server (e.g. accounts will only exist on domain controllers in
which domain controller is located)...

Also pay attention in which domain users are logging since there is
transitive trust between domains. I can take computer in domain A and still
logon to domain B.

Agin -- for us to be able to help you out -- we need as much information as
you can provide us (specially what you are trying to do). With this
information maybe we can give you alternative solution.

--
Mike
Microsoft MVP - Windows Security

"Nick Bergeron" <nickbergeron@xxxxxxxxxxx> wrote in message
news:E89C2B76-238E-4336-B849-9D8520A61790@xxxxxxxxxxxxxxxx
> Well the problem is mention on an other post made earlier
>
> The thing is
>
> We have two DC
>
> 1- a.y.local
> 2- b.y.local
>
> Users on DC #2 can connect to the server on DC #1 but users from DC #1
> cannot access the server on DC #2. They are prompted for username/password
>
> Users are created on both servers.
>
> How can i replicate both DC to each other.
> How can i make sure that all my configurations are working.
>
>
> "Miha Pihler [MVP]" wrote:
>
>> Hi Nick,
>>
>> Can you give us more information what were your expectations or what
>> seems
>> out of place?
>>
>> --
>> Mike
>> Microsoft MVP - Windows Security
>>
>>
>> "Nick Bergeron" <nickbergeron@xxxxxxxxxxx> wrote in message
>> news:1FA5B08B-3F31-4D53-BEE0-8B21BC41DB66@xxxxxxxxxxxxxxxx
>> > Hi everyone
>> >
>> > Is there a way to test my AD domains.
>> >
>> > We have two domains in the same forest and even if do not have error
>> > messages in the event log of both servers, some things aren't working
>> > the
>> > way
>> > i planned.
>> >
>> > The problems i am having are concerning certain access on both servers.
>>
>>
>>


.

Relevant Pages

  • Re: Enumerate shares and permissions
    ... >access on my servers. ... Ideal Migration can export all the shared folders and permissions into ... > Shares, export into a Microsoft ... - In Hyena, right click on the Shares object for a server and select View ...
    (microsoft.public.windows.server.networking)
  • Re: Exchange 2007 direct file access security hole!
    ... What are the permission settings on the shares (not the NTFS permissions)? ... configured direct file access to one of our file servers. ...
    (microsoft.public.exchange.admin)
  • Re: Exchange 2007 direct file access security hole!
    ... configured direct file access to one of our file servers. ... ones) then they can browse these shares well below the point where ntfs ... can see dollar shares so long as the permissions on the share ... and browsing down to a folder I don't have permission to does ...
    (microsoft.public.exchange.admin)
  • Re: Is there any way to restrict access to 2003r2 shares based on what computer a user logs into
    ... I already gave that a shot by denying permissions based on computer and it ... What I would like is to be able to limit my users access to domain shares ... they are logged into and using one of the Terminal Servers. ... I do not want these shares accessible from the XP Pro workstations. ...
    (microsoft.public.windows.server.general)
  • Re: removing user from domain users group doesnt help
    ... What I would do is to give that global group deny access this computer from ... only access shares on that server. ... give that group deny permissions for other shares on that server. ...
    (microsoft.public.windows.server.security)