Solved

Windows Trust Issue

Posted on 2009-04-14
1
673 Views
Last Modified: 2012-06-27
Two Windows 2003 forests with a validated trust set up.  This is across a VPN tunnel on two Cisco ASA 5510s.  On a few of my servers, if I go into Computer Management and Local Users and Groups and try to add users from DomainA into local groups on a computer in DomainB, I select the Location (DomainA), I hit Check Names and it resolves the name correctly (Test User {tuser@domainb.local) but when I click OK it throws this error:

"The domain controllers required to find the selected objects in the following domains are not available: DomainA.  Ensure the domain controllers are available, and try to select the objects again."

I can ping both domain controllers in DomainA from the machine i'm trying to add users to.

On the other hand, going the other direction when trying to add users from DomainB into local groups on a computer in DomainA I cannot "Check Names" and I cannot browse the groups using the advanced options.  I get the following error

The following error prevented the display of any items:

The system detected a possible attempt to compromise security.  Please ensure that you can contact the server that authenticated you.
0
Comment
Question by:dlabbadia01
1 Comment
 

Accepted Solution

by:
dlabbadia01 earned 0 total points
ID: 24263218
This had to do with NETBIOS communication between the two domains over a layer 3 switch.  Setitng up LMHost files on each computer resolved the issue.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Are you unable to connect or configure Hotmail email account in Microsoft Outlook 2010, 2007? Or Outlook.com emails are not downloading to Outlook? Lets’ see the problem and resolve Outlook Connector error syncing folder hierarchy (0x8004102A).
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now