Accessing File Share across Forest Trust

Posted on 2012-08-22
Last Modified: 2013-05-07

I have two domains, with a forest trust built between them.  In domain A, I have a file share that I want users from Domain B to access.  If I share the folder and add users from Domain B individuallly it works fine.  

However, when I try to add a group from Domain B to the file share in Domain A, it wont find the group.  

How can I create a group in Domain B and give them access to a file share in Domain A.

Domain A is 2K3 and Domain B is 2K8.
Question by:Earl28
    LVL 12

    Accepted Solution

    You can uses the info in the next link

    this show you how configure AGDLP, or short for "Add Accounts to Global Groups, then to Domain Local Groups, then apply Permissions to the Domain Local Group."

    Author Comment

    Ok, I got it working from 2k8 to 2k3 by doing what the article suggested.  However, I cant get it to work from 2k3 to 2k8.

    Originally, I had both groups set as domain local.  I changed the group in domain b to globla and added to the domain local group in A and it worked.  But for some reason, when i try the same thing the other way, it cant find the group.

    Any idea?

    Expert Comment

    I need to do the same thing and I am familiar with the AD side, but what required ports are needed since our firewall team wants to lock down everything.

    I am assuming file sharing and ADDS ports

    TCP/UDP 135, 137, 138, 139 (RPC)
    TCP/UDP 389 by default, customizable (LDAP)
    TCP 636 by default, customizable (LDAP SSL)
    TCP 3268 (LDAP GC)
    TCP 3269 (LDAP GC SSL)
    TCP/UDP 53 (DNS)
    TCP/UDP 88 (Kerberos)
    TCP/UDP 445 (Directory Services)


    Featured Post

    Maximize Your Threat Intelligence Reporting

    Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

    Join & Write a Comment

    Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
    Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
    This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now