Trust Problem??

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi

I have a strange problem. I’m trying to access resources from another
domain. I can see the domain b from two of my RDC but not another and I can’t
see them from any client machines or member servers.

I can ping the other domains RDC and NSLOOKUP produce a valid response. I’m
also using DNS and WINS in my domain (where as the other domain just uses
DNS) and have checked to see if the other domain has a valid “b†record which
it does.

So I’m a little stuck and not sure why two machines can see objects in the
other domain whereas other can’t.

Any help would be much appreciated

Thanks in advance
 
san said:
Hi

I have a strange problem. I'm trying to access resources from another
domain. I can see the domain b from two of my RDC but not another and I
can't
see them from any client machines or member servers.

See? Do you mean they don't appear in the browser?
(That is a NetBIOS dependent function which probably
requires WINS Server and all computers to register as
WINS clients, if you have more than one subnet.)
I can ping the other domains RDC and NSLOOKUP produce a valid response.

Have you tried a simple command line "Net Use" command?
(And compared the response with NetBIOS name, DNS Name,
and IP address?)

net use * \\ServerName\ShareName

net use * \\Server.DNS.Name\ShareName

net use * \\IP.Of.Remote.Server\ShareName
I'm
also using DNS and WINS in my domain (where as the other domain just uses
DNS) and have checked to see if the other domain has a valid "b" record
which
it does.

"b" record? Where is this located?

Assuming that you have more than one subnet you need
the "other domain" to deploy a WINS Server (or register
with yours.)

If there is more than one WINS server you will need to
manually enable replication between them.

EVERY machine will need to be a WINS Client -- this
applied most especially to servers and DCs, in addition
to 'ordinary client' computers.
So I'm a little stuck and not sure why two machines can see objects in the
other domain whereas other can't.

What sort of trust do you have? (I.E., is this one forest with
multiple domains, and external trust, or a forest-level trust*?)

*Note: All trusts to domains in other forests are NOT forest
level trust -- forest level trust is a technical term that applied
only when both forests are in (the highest) Win2003 Forest
Functional Level AND you have selected that type. It is
perfectly possible to use external trusts even when both forests
are in Win2003 FFL.
 
Hi Herb

Thanks for your response, I set up a secondary zone to the other domain and
did a a zone transfer and all seem to work fine thenn.

Many Thanks

San


Herb Martin said:
san said:
Hi

I have a strange problem. I'm trying to access resources from another
domain. I can see the domain b from two of my RDC but not another and I
can't
see them from any client machines or member servers.

See? Do you mean they don't appear in the browser?
(That is a NetBIOS dependent function which probably
requires WINS Server and all computers to register as
WINS clients, if you have more than one subnet.)
I can ping the other domains RDC and NSLOOKUP produce a valid response.

Have you tried a simple command line "Net Use" command?
(And compared the response with NetBIOS name, DNS Name,
and IP address?)

net use * \\ServerName\ShareName

net use * \\Server.DNS.Name\ShareName

net use * \\IP.Of.Remote.Server\ShareName
I'm
also using DNS and WINS in my domain (where as the other domain just uses
DNS) and have checked to see if the other domain has a valid "b" record
which
it does.

"b" record? Where is this located?

Assuming that you have more than one subnet you need
the "other domain" to deploy a WINS Server (or register
with yours.)

If there is more than one WINS server you will need to
manually enable replication between them.

EVERY machine will need to be a WINS Client -- this
applied most especially to servers and DCs, in addition
to 'ordinary client' computers.
So I'm a little stuck and not sure why two machines can see objects in the
other domain whereas other can't.

What sort of trust do you have? (I.E., is this one forest with
multiple domains, and external trust, or a forest-level trust*?)

*Note: All trusts to domains in other forests are NOT forest
level trust -- forest level trust is a technical term that applied
only when both forests are in (the highest) Win2003 Forest
Functional Level AND you have selected that type. It is
perfectly possible to use external trusts even when both forests
are in Win2003 FFL.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

Any help would be much appreciated

Thanks in advance
 
Back
Top