HAI FRIENDS,HAI…..
I WILL EXPLAIN THE SCENARIO IN DETAIL….
ACTUALLY I HAVE 1 WIN2K SERVER, 1 DATABASE SERVER AND 10 THIN CLIENTS.
(1)
I HAVE CONFIGURED THE ACTIVE DIRECTORY OF EACH SERVER AS TWO =
SEPERATE DOMAINS(TWOSEPERATE FORESTS).
I HAVE CONFIGURED TERMINAL SERVER IN THE 1st SERVER.CREATED 5 DIFFERENT
USERS.I HAVE PUT ALL THE FIVE IN A SEPERATE ORGANISATIONAL UNIT (OU)
AND SET UP THE GROUP POLICY FOR THAT PARTICULAR OU.(Eg.HIDE THE DRIVES FR=
OM MY
COMPUTER, REMOVE DISPLAY FROM CONTROLL PANEL…)
EVRYTHING IS WORKING FINE WHILE WORKING WITH THE THIN CLIENTS(THROUGH TS
logon localy).
THEN I MADE TRUST RELATIONSHIP(BOTH WAYS) BETWEEN THE TWO DOMAINS.BUT WHI=
LE
ATTEMPTING TO LOGIN WITH A USERFROM THE OTHER DOMAIN IT IS GIVING THE ER=
ROR
AS “the local policy of the system does not allow to login”
WHEN I TRIED TO GIVE THE local logon PERMISSION TO THAT USER FROM THIS DO=
MAIN
(through ADMIN TOOLS — DOMAIN CONTROLLER SECURITY POLICY),
THE ERROR IS “unable to contact the domain”.BUT IT IS SHOWING THE DOMAIN =
IN
THE WINDOW AND ALSO I’M ABLE TO BROWSE THE OTHER SERVER.
THEN I TRIED FOR THE SECOND SERVER AS ADDITONAL DOMAIN CTRLER …..
CHILD DOMAIN…… TREE WITHIN A FOREST… BUT ALL IN VAIN WITH =
THE SAME ERROR.
I HAVE CHECKED THE DNS NAME… AND ALL PARAMETERS FOR AD.
(2)
THEN I MADE THE SECOND SYSTEM AS WIN2K PRO, AND MADE IT AS THE CLIENT OF =
1st
SERVER.HERE ALL ARE OK..DATABASE IS WORKING FINE..
BUT THE POLICIES SET FOR THE USERS ARE NOT WORKING WHILE LOGGING IN THIS
MACHINE.THIS IS THE ACTUAL PROBLEM NOW.GROUP POLICY HAS TO BE MADE ROAMIN=
G.
CUSTOMER IS VERY PARTICULAR FOR THIS GROUP POLICY.
(Also tell me how to make policies for individual users and groups.)
I’M EXPECTING UR MAIL SOON… AT LEAST FOR THE SECOND PROBLEM
PLEASE REP SOON
THANX IN ADVANCE
AVM