Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Two way trust only works on PDC?

Posted on 2011-02-25
6
Medium Priority
?
525 Views
Last Modified: 2012-06-27
I have a new Windows server 2008 R2 domain and forest (both functional levels at 2008 R2)
with a two way trust to another domain in a different forest (both 2000 mixed functional level)

so the setup is
Forest  A Domain A is 2008 R2
Forest  B Domain B is server 2003 running forest/domain 2000 mixed functional level.

on the PDC in Domain A  I can share files and see accounts in Domain B

But on any other member server or other domain controllers in Forest A, when I try to share a file and choose permissions, I can see domain B listed, but I only see about a dozen "built-in" accounts,  not the other 1500 user accounts in that domain.

Any idea how to resolve this?  

Thanks!

0
Comment
Question by:teex-nis
5 Comments
 
LVL 6

Expert Comment

by:sharjeel ashraf
ID: 34985330
did you create teh trusts manually, i.e. on domain first then the other, or did you use the wizard in 2008 and tell the wizard to create the trust on the other side.

also are you using the same account on both servers.

0
 
LVL 37

Expert Comment

by:Neil Russell
ID: 34986244
First of all, there is no such thing as a PDC!  PDC's died with NT Server 4.0 Now ALL domain controllers are domain controllers. Not Backup domain controllers or PDC's Just domain controllers.

You said in your post "But on any other member server or other domain controllers in Forest A"
Are you saying you have a Multi domain forest in A? Is your issue with servers in another domain in the same forest as the server you created the trust or the same domain? Your text here is a little ambiguos thats all.
0
 

Author Comment

by:teex-nis
ID: 34997794
The trust was created using the wizard in 2008.

There is only one domain in each forest.

Things are working fine from domain B (the windows 2003 domain).  but in domain A, only the first domain controller in that domain can see accounts from Domain B.  None of the other domain controllers or member servers in the 2008 domain can see user objects from the 2003 domain.

Thanks
0
 

Accepted Solution

by:
teex-nis earned 0 total points
ID: 35010819
Found the problem,  some how the trust had stopped working.  

I removed the trust and re-created it and things are working fine now.  thanks!
0
 
LVL 72

Expert Comment

by:Qlemo
ID: 35399161
This question has been classified as abandoned and is being closed as part of the Cleanup Program. See my comment at the end of the question for more details.
0

Featured Post

Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

High user turnover can cause old/redundant user data to consume valuable space. UserResourceCleanup was developed to address this by automatically deleting user folders when the user account is deleted.
I’m willing to make a bet that your organization stores sensitive data in your Windows File Servers; files and folders that you really don’t want making it into the wrong hands.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

577 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question