old domain 2003
new domain 2008
both on same subnet, old domain dhcp server.
dns on old dns server is secondary zone on new and vv
external two-way trust successfully created
sid filtering for each forest turned off successfully
share on new fs populated and shared out both share and ntfs perms have old omain group added but cannot access EG from w7p-64 open computer - ALT-d \\fs\sharename yields
"Logon failure - the machine you are logging onto is protected by an authentication firewall. The specified account is not allowed to authenticate to the machine.
Any ideas please?