Solved

Permission problem - NT to 2003 trusts

Posted on 2004-09-22
1
240 Views
Last Modified: 2010-04-10
I've created a two-way trust between an NT domain and a 2003 domain in a test network.  Users on the NT domain can access shares on the 2003 domain but not the other way around.
Whenever I try to access shares on the NT domain controller, I receive a message saying that I'm not allowed to access the resources.

Clearly I'm dealing with a permissions issue - the problem is where do I need to change the permissions?  I've tried adding domain users and authenticated users from the 2003 domain to the permissions on the NT DC at the root, at the share, and at the sub-folders within the share.

Is there some kind of update function that needs to be done before 2003 users can access the resources on the NT domain?

What am I missing?

0
Comment
Question by:acksis
1 Comment
 
LVL 16

Accepted Solution

by:
JammyPak earned 100 total points
ID: 12123278
on the NT machine, add at least Read permissions to users or groups from the 2003 domain in the 'Sharing' tab of the folder you're sharing, and also in the 'Security' tab of the folder. For the security tab (ntfs permissions), make sure that the permissions are inherited to the files or subfolders of the share as well.

then, from the a machine in the 2003 domain, try to map a drive to that share.

you may also need to edit the 'User Rights' policy on the NT machine (using User Manager) to specify that the user or group from the 2003 domain has the 'Access this computer over the network' user right.
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
In-place Upgrading Dirsync to Azure AD Connect
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question