Solved

Two way trust only works on PDC?

Posted on 2011-02-25
6
515 Views
Last Modified: 2012-06-27
I have a new Windows server 2008 R2 domain and forest (both functional levels at 2008 R2)
with a two way trust to another domain in a different forest (both 2000 mixed functional level)

so the setup is
Forest  A Domain A is 2008 R2
Forest  B Domain B is server 2003 running forest/domain 2000 mixed functional level.

on the PDC in Domain A  I can share files and see accounts in Domain B

But on any other member server or other domain controllers in Forest A, when I try to share a file and choose permissions, I can see domain B listed, but I only see about a dozen "built-in" accounts,  not the other 1500 user accounts in that domain.

Any idea how to resolve this?  

Thanks!

0
Comment
Question by:teex-nis
6 Comments
 
LVL 6

Expert Comment

by:sharjeel ashraf
Comment Utility
did you create teh trusts manually, i.e. on domain first then the other, or did you use the wizard in 2008 and tell the wizard to create the trust on the other side.

also are you using the same account on both servers.

0
 
LVL 37

Expert Comment

by:Neil Russell
Comment Utility
First of all, there is no such thing as a PDC!  PDC's died with NT Server 4.0 Now ALL domain controllers are domain controllers. Not Backup domain controllers or PDC's Just domain controllers.

You said in your post "But on any other member server or other domain controllers in Forest A"
Are you saying you have a Multi domain forest in A? Is your issue with servers in another domain in the same forest as the server you created the trust or the same domain? Your text here is a little ambiguos thats all.
0
 

Author Comment

by:teex-nis
Comment Utility
The trust was created using the wizard in 2008.

There is only one domain in each forest.

Things are working fine from domain B (the windows 2003 domain).  but in domain A, only the first domain controller in that domain can see accounts from Domain B.  None of the other domain controllers or member servers in the 2008 domain can see user objects from the 2003 domain.

Thanks
0
 

Accepted Solution

by:
teex-nis earned 0 total points
Comment Utility
Found the problem,  some how the trust had stopped working.  

I removed the trust and re-created it and things are working fine now.  thanks!
0
 
LVL 68

Expert Comment

by:Qlemo
Comment Utility
This question has been classified as abandoned and is being closed as part of the Cleanup Program. See my comment at the end of the question for more details.
0

Featured Post

Are end users causing IT problems again?

You’ve taken the time to design and update all your end user’s email signatures, only to find out they’re messing up the HTML, changing the font and ruining the imagery. What can you do to prevent this? Find out how you can save your signatures from end users today.

Join & Write a Comment

On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now