Can not see users in other domain

Grog · Guest

Hello,

I have 2 domains, one in windows 2003 and one in windows 2000. I created
successfully trust between the 2 domains to give the right for user in 2000
domain to have acces on shares on 2003 domain.

My problem is : From windows 2000 domain, I can see the user located in 2003
domain , but From windows 2003 domain I cannot see the user located in 2000
domain.

Thanks for your help

Wong Tuck Wah · Guest

From your description, it seems to be a one-way trust. with the windows 2000
beingthe trusted (account) domain, while windows 2003 is the trusting
(resource) domain.

But your problem appears to be otherwise, seems like the trust has been
created in the wrong direction.

Check the trust between the 2 domains again.

HTH.

"Grog" wrote:

Grog · Guest

"Wong Tuck Wah" wrote:

Grog · Guest

Sorry, my explation seems to be not clear. It is a two way trust, this trust
has been successfully verified. But only windows 2000 domain can see the
users in windows 2003 domain. From windows 2003 domain when i try to change
location I can select the windwos 2000 domain but I can not see users or
groups.

Thanks in advance

Gerard

"Wong Tuck Wah" wrote:

Wong Tuck Wah · Guest

OK, I would like to know from where do you try to access the users/groups on
the trusted domain? Is it from the file/folder NTFS permission or while
trying to add someone as member to a group

A scenario might be this:
When you try to add users/groups from the 2000 domain to a global group in
2003 domain, because global group can only have members fromits own domain
and not other domains, therefore you don't see them.

"Grog" wrote:

Wong Tuck Wah · Guest

OK, I would like to know from where do you try to access the users/groups on
the trusted domain? Is it from the file/folder NTFS permission or while
trying to add someone as member to a group

A scenario might be this:
When you try to add users/groups from the 2000 domain to a global group in
2003 domain, because global group can only have members fromits own domain
and not other domains, therefore you don't see them.

"Grog" wrote:

Grog · Guest

From My windows 2003 domain when I tried to add NTFS permission on a file or
folder, I can see the two domains name (windows 2000 and windows 2003) but
when I choose the location windows 2000 domain, I can not browse the domain
and I can not see users. If I choose windows 2000 location and if I type an
existing username, it takes long time and I received the message server not
operational.

Thanks for you understanding

Gerard

"Wong Tuck Wah" wrote:

Jorge Silva · Guest

Hi

- Confirm the trusts on both domains, very that they exist in both.
- Verify Dns settings, make sure that both domains can ping eachother by
FQDN.
- Make sure that each DC/DNS only points to itself under Dns properties.
- When you are setting NFS perm, in the Object types - what is selected?

--
I hop that helps

Good Luck
Jorge Silva
MCSA
Systems Administrator

"Grog" <Grog@discussions.microsoft.com> wrote in message
news:8C54D182-3A69-4C31-8DD2-63BC7C7702A7@microsoft.com...

Wong Tuck Wah · Guest

Hi Grog,

I tried to simulate your problem but couldn't reproduce it.

What I can think of now is

1. recreate the trust between the 2 domains again and reboot the servers

2. ensure that there is no firewall rules that block ldap traffic from going
out to the 2000 domain
http://technet2.microsoft.com/WindowsServer/en/Library/f5c70774-25cd-4481-8b7a-3d65c86e69b11033.mspx?mfr=true

3. look at this article and see whether it suits you
http://support.microsoft.com/kb/837328/en-us

"Grog" wrote: