Solved

Tree root trust - Access Denied

Posted on 2010-09-17
3
897 Views
Last Modified: 2012-05-10
Hi all,

Building a new AD network I've setup a forest: alpha.forest and the tree root domain beta.local so all the users will log on to the domain 'beta'.

The automatic trust between them is only one way; if I validate the trust on Alpha it's fine.  If I validate the trust on Beta if fails with access denied.  I then log in with Alpha's admin credentials and I'm told it's all good.  I then retry the test and if fails again.

Can't see any errors in either event log at all.

Any advice most welcome.

Thanks
Paul.
0
Comment
Question by:looops
  • 2
3 Comments
 
LVL 24

Accepted Solution

by:
Mike Thomas earned 250 total points
ID: 33700692
"alpha.forest and the tree root domain beta.local"

Trust issues aside I do not quite understand what you have done? why build 2 forrests?

the whole point of having a forrest is that you can have a single security boundry with many domains.

so you should have a root domain

root.local then maybe a child domain called alpha which would be alpha.root.local or whatever.




0
 

Author Comment

by:looops
ID: 33701230
It's not two forests, it's a child domain but we wanted it's own name for branding / locale reasons. ie wanted the users to log into 'beta'.
0
 

Author Closing Comment

by:looops
ID: 33796881
I rebuilt the AD ito a standard 1st Forest / Domain.

Thanks for the input.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you migrate a Terminal Server licenses server inside the 2008 server family, you can takte advantage of the build-in migration tool. If you like to migrate an older 2003 Server (and the installed client CALs) to a 2008 R2 server for example, you …
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now