Windows·65,545 discussions

Domain trusts

Locked

We have an NT domain in our 2000 forest that we have added to our “domains that trust this domain” under trusts. The domain admin from the NT domain is unable to receive access when browsing our domain, but when he tries to add a user from our domain to his groups he is able to only if he types out the path instead of browsing.

Does anyone have any ideas why this might be, we thought that it might be permissions on the pre-windows 2000 control settings but this turned out wrong.

Any ideas?

Topic

Domain trusts

In reply to Domain trusts

Is your forest running in Native or Mixed Mode?

2000 Active Directory is a nasty beast when running in Mixed Mode.

In the Active Directory Users and Computers, did you add that domains admins into the the enterprise admins group?

There may be issues with pre-w2k domains because they are not using Active Directory. Which is a key foundation to browsing thru the forest. NT4 knows nothing about active directory and from what I can tell will choke.

Try pointing the NT domain controllers DNS to the Active Directory Based DNS server.

There is one thing that I read in the ms accelerated exam book, Non-win2k clients can not benefit from transitive trust, they are limited to the limitiations of pre-w2k trust relationships access toresources.
(pgs 448-449)

With that in mind check the trust relationships on the nt4 pdc.

From everything I have read so far, MS expects you to upgrade your pdc to 2k then move your bdcs and member servers. It is very cryptic about NT4 PDCs <--> W2k DCs

Good luck – thanks though, now you have given me another lab to try.

Domain trusts

In reply to Domain trusts

The question was auto-closed by TechRepublic

Domain trusts

In reply to Domain trusts

“domains that trust this domain” means that you, on the 2000 domain have complete access to the NT domain but not the other way around. The NT domain must be trusted by you in order for them to access the resources on your 2000 domain. Create a two way trust between the domains and this should solve the problem.
Good luck!

Mike

Domain trusts

In reply to Domain trusts

The question was auto-closed by TechRepublic

Domain trusts

In reply to Domain trusts

This question was auto closed due to inactivity

[Author]

Replies