Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2353
  • Last Modified:

Windows 2003 Forest Trust, Windows 2000 cannot authenticate users

Ok this is kind of hard to explain so I will try... I have two domains... lan.company.com and prod.company.com

lan.company.com -- LAN Servers and Workstations
prod.company.com -- Production servers

Both domains have 2 DC's running Windows 2003. The forest functional level for both is Windows 2003. I have established a two way transitive trust between the two domains. What I now need to happen is to have users be able to authenticate to resources on either domain (Namely the Domain Admins) so that file transfers can occur between the two. On all of my Windows 2003 servers I can add folder permissions for users from the other domain, however the problem I am encountering now is my Windows 2000 Advanced Servers cannot add folder permissions for users from the other domain. When logged into a Windows 2003 box, I can search from the other domain and pull up users, however from the Windows 2000 servers i cannot even see the other domain, hence i cannot search/add users.

I have spoken to MS briefly and they say that the Forest Functional level has nothing to do with this.

Any ideas?

1 Solution
you need to create universal sec groups in each domain
and add those groups to appropriate domain local groups in the other domain
something like:
in lan.company.com- create "Prod" universal group and add users you need to have access to files from prod.company.com to this group
in prod.company.com-create "LAN" domain local group and add "Prod" group to this group.
and the vise-versa for the prod.company.com domain

hope this helps...

Featured Post


Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now