DNS across domains

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I believe this is a DNS problem but not sure ....

I have Domain A and Domain B, Domain B is an external one-way trust, in that
Users in A have access to resources in B. When I add a user from A to a
resource in B, I can browse the AD users and computers to add the
permissions. When I close all dialog boxes, check the permissions all I get
is a SID number.

Domain B is not resolving the user names.

thanks
 
In
RThibault said:
I believe this is a DNS problem but not sure ....

I have Domain A and Domain B, Domain B is an external one-way trust,
in that Users in A have access to resources in B. When I add a user
from A to a resource in B, I can browse the AD users and computers to
add the permissions. When I close all dialog boxes, check the
permissions all I get is a SID number.

Domain B is not resolving the user names.

thanks

That would be an NTLM issue, which is based on NetBIOS, not DNS. Is NetBIOS
name resolution supported between the locations of the two domains? WINS
would be the answer here.

--
Regards,
Ace

If this post is viewed at a non-Microsoft community website, and you were to
respond to it through that community's website, I may not see your reply.
Therefore, please direct all replies ONLY to the Microsoft public newsgroup
this thread originated in so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services
Infinite Diversities in Infinite Combinations.
=================================
 
Ace Fekay said:
In

That would be an NTLM issue, which is based on NetBIOS, not DNS. Is NetBIOS
name resolution supported between the locations of the two domains? WINS
would be the answer here.

--
Regards,
Ace

If this post is viewed at a non-Microsoft community website, and you were to
respond to it through that community's website, I may not see your reply.
Therefore, please direct all replies ONLY to the Microsoft public newsgroup
this thread originated in so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services
Infinite Diversities in Infinite Combinations.
=================================


yes WINS is enabled on both domains ... thanks
 
In
RThibault said:
Yes WINS servers are configured as replication partners ... thanks
for your help


If the problem is that it just comes down to the ACL just showing the SID
numbers and takes forever to resolve the associated user/group account, it
can come down to how busy the DCs are and/or WAN links. Since I am not aware
of your network configuration and topology, I would be guessing at this
point. I've seen overloaded DCs and/or WAN links cause this same thing.
Otherwise, if the user/group still has access to the resource, I wouldn't
worry too much.

Ace
 
Back
Top