NT4 domain users unable to access resource on Windows 2003 domain

Hi,

We have 2 domains in our organization, one NT4 and one 2003. I created a one way trust relationship, Windows 2003 trust NT4. The trust relationship validation was OK in the AD domains and trust utility. For testing purpose, I assigned read permission for one of the NT4 user account for a folder on one of the file servers in the 2003 domain. Everything seemed to be working OK until this point. When I logon to the NT4 domain with an Windows XP machine and tried mapping a drive with the folder that I granted permission to the NT4 users, it always complained that the mapped network drive could not be created because the following error: An expected error has occurred. I tried logging on to the XP locally, instead of the domain, and mapped the same with the NT4 credential, I would get the same error. However, I mapped successfully if I provide the Windows 2003 credential instead. It looked to me there was some authentication problem between the Windows 2003 DC and the NT4 DC.

Anyone has any idea? Thanks in advance
lineonecorpAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

jasin00Commented:
is your AD mixed mode or naitive? NT really? time to upgrade, i would agree your having authentication issues. what level of sp is your NT server on?
0
lineonecorpAuthor Commented:
We are actually in the migration process. I would like to allow some of the NT users to be able to access the resource on the 2003 domain during the migration, don't want to do the on time switch. NT4 is in SP6a, I believe and AD is on 2003 domain functional level and 2000 forest functional level.
0
lineonecorpAuthor Commented:
I figured what the problem is. In order to allow access to the resource on the file server, not only I have to assign NTFS permission for the NT user account, but also gave them allow to authenticate right on the file server. It works after I made that change.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows OS

From novice to tech pro — start learning today.