Domain trust issue

-

i'm having trouble assigning permissions resources domaina users in domainb.

from server in domaina, on security tab in windows explorer can select domainb object following error: “cannot display objects location because of following error: no authority contacted authentication."

from server in domainb can map drive drive$ share in domaina (via net use) provided use /user switch , specify domain , user name. once have drive mapped server in domaina can assign permissions users in domainb. after permissions assigned, if i view permissions on server in domaina via server in domaina see sids (i presume these domainb).

i tried test access after permission assigned via "domain user" account in domainb trying access share in domaina , got following error: "there no logon servers available service logon request"

domaina windows 2000 native mode. domainb windows 2008 - domain , forest functional level 2003.

domaina configured secondary zone of domainb. dc's in domaina have lmhosts file configured options 0x1b, ox1c , domainb domain name (all 3 options point pdc emulator of domainb). imported lmhosts file wins , verified records exist.

domainb has conditional forwarder configured domaina.

name resolution between domains appears work.

i’ve ran: netdom trust domaina /d:domainb /verify /kerberos … , trust verified successfully.

 

this feels it’s name resolution issue, can’t place finger on issue is. thoughts? appreciated

hello cameron,

1- delete manual records created in wins or lmhosts file

2- delete secondary dns zones

3- configure dns frowarders domaina domainb , vice versa

4- make sure name resolution working fine on both domains , can ping domain name (from domaina ping domainb.com , vice versa)

when make sure these settings ok, following:

on dc holds infrastructure operation master in domainb, first dc in domain, uncheck global catalog check box active directory sites , services snap-in, note should have more 1 dc in domainb.

mcdst, mcsas, mcses, mcdba, mcitp, mcts, mct


Windows Server  >  Directory Services



Comments

Post a Comment

Popular posts from this blog

Edit Group Policy

-
i have pc has power settings pushed out default domain policy in ad environment. of course on local machine "some settings managed system adminstrator". the machine temporarily no longer in contact domain controller (it's been physically moved , not on same network now) can't updated gpo settings. i believe if edit local group policy won't make difference because of group policy processing , precedence. since it's temporary away ad network, still want use settings of ad user. is there somewhere in registry stored can edit power plan manually until can sync domain? (i need prevent sleeping while plugged in - it's set 1 hour) thanks! allen crist i found site: http://gpsearch.azurewebsites.net/#7916 i able add policy to hkey_local_machine\software\policies\microsoft\power using specs found on site. looks solved issue. i'll report if didn't. thanks! allen crist ...
Read more

Hyper-V VM not reaching OS 'Logon' screen

-
i trying migrate vm vmware hyper-v. so far have done following (seemingly successfully): prepare vmware vm conversion hyper-v format (vhd) within vmware workstation 8.0 environment following steps guide: http://social.technet.microsoft.com/forums/en/winserverhyperv/thread/ef8c12f7-c45d-442e-9a30-c43cd87df3b3   (i.e. remove vm tools, add new ide hard disk…) use vmdk2vhd application convert individual vmdk files vhd ones create new vm in hyper-v exporting in 3 newly converted vhd files at point have checked settings , powered on vm in hyper-v find although windows begins load expected manages reach screen prior login screen saying either of following messages: “windows starting up…” “the active directory rebuilding indices… please wait” to knowledge, albeit limited in area, vm should present me login screen since appears in vmware. if start vm in safe mode can login not desired affect. below details of vm: operating system: windows server 2003 (enterprise edit...
Read more

DNS question...

-
i new setting dns server....my domain name expl. "domain.com"....i set "a" record in forward lookup for  www.domain.com itself...."server's local ip"....i've added no other zones , i seem able resolve names except own....www.domain.com.....also, do i put my isp's dns ip's....for external dns's server can't resolve?....forwarding or in nic setup?......i want setup in my dns server don't have include them on client side..... thanks mark     not put isp dsn server address in settings on nic dc or clients. should point local dns server on dc. set dns forward public dns, such isp. bill Windows Server  >  Network Infrastructure Servers
Read more