Two way trust only works on PDC?

I have a new Windows server 2008 R2 domain and forest (both functional levels at 2008 R2)
with a two way trust to another domain in a different forest (both 2000 mixed functional level)

so the setup is
Forest  A Domain A is 2008 R2
Forest  B Domain B is server 2003 running forest/domain 2000 mixed functional level.

on the PDC in Domain A  I can share files and see accounts in Domain B

But on any other member server or other domain controllers in Forest A, when I try to share a file and choose permissions, I can see domain B listed, but I only see about a dozen "built-in" accounts,  not the other 1500 user accounts in that domain.

Any idea how to resolve this?  

Thanks!

teex-nisAsked:
Who is Participating?
 
teex-nisConnect With a Mentor Author Commented:
Found the problem,  some how the trust had stopped working.  

I removed the trust and re-created it and things are working fine now.  thanks!
0
 
sharjeel ashrafSenior Network EngineerCommented:
did you create teh trusts manually, i.e. on domain first then the other, or did you use the wizard in 2008 and tell the wizard to create the trust on the other side.

also are you using the same account on both servers.

0
 
Neil RussellTechnical Development LeadCommented:
First of all, there is no such thing as a PDC!  PDC's died with NT Server 4.0 Now ALL domain controllers are domain controllers. Not Backup domain controllers or PDC's Just domain controllers.

You said in your post "But on any other member server or other domain controllers in Forest A"
Are you saying you have a Multi domain forest in A? Is your issue with servers in another domain in the same forest as the server you created the trust or the same domain? Your text here is a little ambiguos thats all.
0
 
teex-nisAuthor Commented:
The trust was created using the wizard in 2008.

There is only one domain in each forest.

Things are working fine from domain B (the windows 2003 domain).  but in domain A, only the first domain controller in that domain can see accounts from Domain B.  None of the other domain controllers or member servers in the 2008 domain can see user objects from the 2003 domain.

Thanks
0
 
QlemoBatchelor, Developer and EE Topic AdvisorCommented:
This question has been classified as abandoned and is being closed as part of the Cleanup Program. See my comment at the end of the question for more details.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.