Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Problems accessing shares on other domain

Posted on 2011-09-07
6
Medium Priority
?
288 Views
Last Modified: 2012-05-12
We have a one way trust in place between DomainA and DomainB.

I am having an issue with some servers (others work fine) whereby I am unable to access the shares on a server in DomainB from DomainA.

Whilst testing, I have placed the domain admins of DomainA into the server in DomainB. I know that this has taken affect as I can login to the server with my DomainA credentials after doing this.

When I am on a machine in DomainA (logged in with my domain Admin account) and I try to resolve
\\server
I get all the shares returned

Clicking on any of the shares gives me 'access denied'

I have checked the security logs on the sever which tell me that the Access has been granted - Audit Success!

If I try accessing any of the admin shares (admin$, C$ etc.) then I get a prompt for a username and password

The permissions on the shares are 'Everyone' = Full Control and I have also checked using effective file permissions that the rights are correct.

It would *appear* to only be affecting Server 2008 (we also run 2003) systems but other Server 2008 systems are OK.

Can anyone offer any suggestions?
0
Comment
Question by:aideb
  • 2
  • 2
  • 2
6 Comments
 
LVL 5

Accepted Solution

by:
Didier Vally earned 1500 total points
ID: 36495601
0
 

Expert Comment

by:blazedanblazin
ID: 36495651
Just to confirm; you do have some servers in DomainA that can successfully access those same shares on DomainB?

if so, have you already tried a gpupdate on the server in DomainA that's having problems accessing the shares?
0
 
LVL 2

Author Comment

by:aideb
ID: 36496597
Just to confirm; you do have some servers in DomainA that can successfully access those same shares on DomainB?

--No, the shares on 'some' of the servers in DomainB are not accessible from any location in DomainA

0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 

Expert Comment

by:blazedanblazin
ID: 36503282
I would definitely look into the link posted by ppcdev and see if any of the potential solutions listed in it would work.
0
 
LVL 2

Author Closing Comment

by:aideb
ID: 36586131
Thanks!
0
 
LVL 5

Expert Comment

by:Didier Vally
ID: 36586194
You're welcome :)
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
Compliance and data security require steps be taken to prevent unauthorized users from copying data.  Here's one method to prevent data theft via USB drives (and writable optical media).
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

876 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question