Trust Relationship - Net Use Question

Posted on 2001-08-30
Last Modified: 2010-05-18
Windows 2000 - I have a user on domain "cat" that is currently visiting a field office.  This field office is on domain "dog"

cat and dog domains DO NOT have a trust relationship

I created an account for user on "dog" domain

Set WNS and DNS with both "cat" and "dog" TCP domain accounts.  Left gateway blank.

User is logged into "cat" domain and can see servers on "cat" domain.  Cannot see "dog" domain.

While I can ping "dog" domain when I go to start run
get error that domain is locked and not accessible

Tried mapping drive to \\dog and get error "path not found"

So - tried using net use at the command line
Y: \\dog\files /user:dog\jsmith
Get error domain not found

Is my syntax wrong?  Is it even possible to access files on a domain in which there is no trust relationship?

Question by:tituba2
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +3

Expert Comment

ID: 6441220
you left the gateway blank?  Are both domains on the same network/subnet?

LVL 10

Expert Comment

ID: 6441305

Without the thrust relationship you are not known from the other domain

Use the following command

net use x: \\Server\Share * /u:domain\username
"domain" may be a computername and server an ip


LVL 32

Expert Comment

ID: 6441329
You're question is all confused and I think the reason is that you don't understand the relationship between networks, domains/trusts, and network services.

I'm not even sure where to start....

1) You must have a viable PHYSICAL network connection in place.  So be sure you are plugged into an active network port.

2) You must have a viable LOGICAL network connection in place.  In this case you seems to be using (or trying to use) TCPIP.  For TCPIP to work you MUST HAVE an IP address, a network MASK, and a GATEWAY.  If you left the gateway blank then ALL HOSTS you try to contact MUST BE ON THE LOCAL SUBNET as specified by the network MASK.  It would be VERY UNUSUAL to have a blank gateway.  Once TCPIP is working correctly you should be able to PING another host by IP address.

3) You must have a working name resolution and the most common here is DNS.  You need a DNS server and you need to set that up in the network control panel.  Once that is setup you should be able to PING by NAME.

4) For Window networking to work by name you must have WINS working.  WINS is similar to DNS but is specific to Windows networking.  If you specify a host like \\hostname\sharename, you are asking WINS or an alternate Windows name resolution service to figure out who "hostname" is.  Since you mentioned WINS I'm assuming you have a WINS server and know its IP address.

5) Now you are in a position to authenticate to the domain and this is all that NT DOMAINs are responsible for.  Basically logging you in and thereby controlling access to the Domain resources.  If you have no trust between cat and dog you must JOIN the domain before you can logon to it.  Once you join dog, you are no longer a member of cat.  You can only then logon to cat if you again join cat.  You cannot be a member of more than one domain at a time.
Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!


Author Comment

ID: 6442057
1.  Yes, I have a physical connection to the network
2.  Cat and Dog are on different subnets.  I tried putting their gateway and it did not make a difference
3.  I CAN ping "dog" by name and TCP.  What I cannot do is
then open folders on the dog domain
4.  WNS is working as I can ping both by name and TCP

What I cannot seem to do is join "dog" domain.

This syntax produces error "domain not found"
LVL 32

Expert Comment

ID: 6442071
How are you attempting to joing the "dog" domain?

If the error is that the domain is not found then the domain is not found.  You are giving it the wrong name or in fact there is no domain by such a name.
LVL 10

Expert Comment

ID: 6442338
Are your shares corrects ?
Are they not hidden ?
Have you tried "net use" with the IP server ?

maybe some help :


Expert Comment

ID: 6442496
Just create the trust.

Author Comment

ID: 6442656
Can't create the trust - corporate decision.  They don't want a trust between these two domains.  They just send "visitors" here and want them to access both know the song

My shares are correct and user has permissions for the shared folder.

Accepted Solution

msctec earned 200 total points
ID: 6443885
Thats the whole point of a trust. If you don't set up the trust you won't get to see the domain. You can ping it because it is just an ip address. There is no firewall blocking out pings or ip adress ranges. No trust - no access.

Expert Comment

ID: 6444329
have you considered ftp access ?
since you can't have a trust, ftp would also work. it will be bit more admistrative work

hope this helped
LVL 10

Expert Comment

ID: 6444775

The 1rst answer you receive already tell you you need a thrust relationship. What's wrong ?

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Print Server: NT to 2008 10 598
How to change folder redirection to a new server 5 753
VMware converter for windows 2000 server SP4 4 6,284
ClamAV for Old Windows 2000 Server 7 2,225
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
An introduction to the wonderful sport of Scam Baiting.  Learn how to help fight scammers by beating them at their own game. This great pass time helps the world, while providing an endless source of entertainment. Enjoy!
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question