?
Solved

Accessing share across two domains

Posted on 2013-10-30
2
Medium Priority
?
466 Views
Last Modified: 2013-11-01
Hi All,

This should be straight forward, but I can't think why its not working.

We have two domains.  We'll call  them domain1.local and domain2.local

There's a two external non-transitive trusts setup between the two domains.

I've shared out a folder called  \\MyServer.domain1.local\data and granted the everyone group read access.  People in both domains can access the share.

I then created a sub folder called  \\MyServer.domain1.local\data\finance

..remove permission inheritance, and setup two global security groups (one in each domain) with full control.

A user in domain2.local has logged off and on and I've confirmed the have the new security group.  However they can't see the sub folder.


Any ideas why?
0
Comment
Question by:detox1978
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 24

Accepted Solution

by:
Sandeshdubey earned 2000 total points
ID: 39612133
Check the sub folder do the group in question have permission to access the same.

In order to add users in AD from one domain another domain either to computers/groups/AD,then you need to use AGDULP method. Also, add the DNS suffix in the clients NIC for faster domain location.

Add the User Accounts to Global Groups> Global Groups to Universal Group> Universal Groups to Domain Local Groups > Domain Local Groups to the group you want to assign the permission.http://technet.microsoft.com/en-us/library/bb742592.aspx
0
 
LVL 2

Author Closing Comment

by:detox1978
ID: 39617307
thanks
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A hard and fast method for reducing Active Directory Administrators members.
Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question