Security

Ask something
Question Locked

Domain security problem

0 helpful
3 replies

by mynt_boro

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello all,

I've got 2 domains in the same location and they trust each other.

Some times, the users can not get to the shared resouce even that resource is in the same domain. After restart the computer for a few times, it works again.

Could somebody please tell me why it happen and how to fix that.

Thanks in advance.
TheMy

3 replies

by churdoo

I see your other post, with the single DHCP server servicing clients from your 2 domains. My sense is that something is flaky with your DNS. The first DNS server that your DHCP server hands out, does it have BOTH domains listed in its forward lookup zones, and are both zones fully populated? I'm guessing no.

Whichever domain the first DNS server is NOT a member of, will have to be loaded into the active (first-listed) DNS server as a SECONDARY zone. In order to do this, you will have to manually add this server's as a NAMESERVER for the zone so that it will be allowed to transfer the zone data, and allow zone transfers to all nameservers. You do this in the DNS properties of the zone.

Or if the first-listed DNS server is Server 2003, you can specify a FORWARDER for the other domain pointing to the DNS server for that domain.

You'll also want to populate the DNS suffix list in DHCP with BOTH domains.

Confusing I know, but if you can't follow along, post back, or perhaps someone else can clarify.

by mynt_boro

Hello Churdoo,

Thanks for your post. I have add the forwarder for both domain point to each other and populate the DNS suffix list in DHCP before but sometimes the problem did happen.

I did realize that I have not raised the functional level for the 2 forest yet (all domain forest have the window2000 functional level, but the domain controller itself have the window2003 functional level). After raising the functional level, everything is fine (till now), not sure it is the right thing to do but it looks to me that it works.

Thank you very much for your time.
TheMy

This discussion is closed to new replies.