emelnik
asked on
Access privileges on forest trusts
Hello,
We are using Windows Server 2003 R2, have two separate Active Directories (and forests) on our company and we created a forest trust between them. We need to be able to share resources and administrative access. The trust was established successfully but now we're struggling with the access rights. The problems we have encountered so far are:
1. Users from one forest can't authenticate on servers on the other forest with the error "The local policy of this system does not permit you to logon interactively".
2. We can't add groups (of any kind) or users from one forest to the other. For example we tried adding the administrators from forest B to the Domain Admins group of forest A but the system doesn't allow it.
3. We haven't been able to delegate any administrative tasks.
Don't know if we're missing any steps or if we did anything incorrectly. The trust between the forest is a two way domain trust and it has been validated.
Thanks
We are using Windows Server 2003 R2, have two separate Active Directories (and forests) on our company and we created a forest trust between them. We need to be able to share resources and administrative access. The trust was established successfully but now we're struggling with the access rights. The problems we have encountered so far are:
1. Users from one forest can't authenticate on servers on the other forest with the error "The local policy of this system does not permit you to logon interactively".
2. We can't add groups (of any kind) or users from one forest to the other. For example we tried adding the administrators from forest B to the Domain Admins group of forest A but the system doesn't allow it.
3. We haven't been able to delegate any administrative tasks.
Don't know if we're missing any steps or if we did anything incorrectly. The trust between the forest is a two way domain trust and it has been validated.
Thanks
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Hi,
if you solve it's good. Congratulations.
Anyway two way trust and domain-wide vs selective authentication is something different.
if you solve it's good. Congratulations.
Anyway two way trust and domain-wide vs selective authentication is something different.
ASKER
Had to solve it quickly and found the solution by myself.
What is your domain / forest levels ?
Do you have selective authentication or forest wide forest trust configured?