[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

Accessing resources across Windows Server 2003 domains

Posted on 2007-03-22
5
Medium Priority
?
309 Views
Last Modified: 2008-01-09
Hi all,
I've got a client with 2 Windows Server 2003 R2 domains in one physical location. These 2 domains are totally separate, and the only thing they share presently is an internet connection and an ethernet switch. My clients want users in domain A to be able to access resources on servers and workstations in domain B. The main imperative is that users in domain B should not have any access to servers or workstations in domain A. The things I guess I need:

I'm guessing that I need a one-way trust but my experience is very single-domain so I'm looking for a quick walk-through here!

Is a one-way trust truly one-way, is there NO way for domain B users to access domain A?

How do I configure permissions etc on resources in domain B so that domain A users can access the requisite resources?

Can users from domain A be given permission to log onto computers belonging to domain B?

Thanks.
0
Comment
Question by:budchawla
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 19

Accepted Solution

by:
aissim earned 2000 total points
ID: 18773330
* Yes, a one-way trust is what you need. You'll want domain B to trust domain A.
* One-way is truly one way. Domain B will not be able to access domain A in any way.
* Once the trust is in place, you'll be able to configure permissions in domain B the same as always - you'll just have access to resources/accounts in domain A as well...nothing tricky. For example, if you want to modify a folder's permissions - you can select users from either domain to allow access. They're all at your fingertips.
* Yes, users from domain A will be able to log onto computers in domain B as soon as the trust is in place. On the logon screen, the 'domain' drop down field, will allow you to choose either domain
0
 
LVL 10

Author Comment

by:budchawla
ID: 18773894
I love a well structured response... thanks aissim. I'm sure everything will work as you say, but I'll leave this open till I can test it so I can come back with any queries :-)
Thanks again..
0
 
LVL 19

Expert Comment

by:aissim
ID: 18773959
Sounds good - post back if you have any questions along the way.
0
 
LVL 10

Author Comment

by:budchawla
ID: 19305397
Sorry for the delay & thanks!
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…
Visualize your data even better in Access queries. Given a date and a value, this lesson shows how to compare that value with the previous value, calculate the difference, and display a circle if the value is the same, an up triangle if it increased…
Suggested Courses

656 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question