Solved

Access privileges on forest trusts

Posted on 2011-02-18
4
308 Views
Last Modified: 2012-05-11
Hello,

We are using Windows Server 2003 R2, have two separate Active Directories (and forests) on our company and we created a forest trust between them. We need to be able to share resources and administrative access. The trust was established successfully but now we're struggling with the access rights. The problems we have encountered so far are:

1. Users from one forest can't authenticate on servers on the other forest with the error "The local policy of this system does not permit you to logon interactively".
2. We can't add groups (of any kind) or users from one forest to the other. For example we tried adding the administrators from forest B to the Domain Admins group of forest A but the system doesn't allow it.
3. We haven't been able to delegate any administrative tasks.

Don't know if we're missing any steps or if we did anything incorrectly. The trust between the forest is a two way domain trust and it has been validated.

Thanks
0
Comment
Question by:emelnik
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 2

Expert Comment

by:matyke
ID: 34932674
Hi,

What is your domain / forest levels ?

Do you have selective authentication or forest wide forest trust configured?
0
 

Accepted Solution

by:
emelnik earned 0 total points
ID: 34933677
It's Windows 2003 and it's two way authentication.
I think I solved it, I added the domain admins group to the local administrators group for each domain.
0
 
LVL 2

Expert Comment

by:matyke
ID: 34936747
Hi,

if you solve it's good. Congratulations.

Anyway two way trust and domain-wide vs selective authentication is something different.
0
 

Author Closing Comment

by:emelnik
ID: 34978029
Had to solve it quickly and found the solution by myself.
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question