Solved

Accessing share across two domains

Posted on 2013-10-30
2
450 Views
Last Modified: 2013-11-01
Hi All,

This should be straight forward, but I can't think why its not working.

We have two domains.  We'll call  them domain1.local and domain2.local

There's a two external non-transitive trusts setup between the two domains.

I've shared out a folder called  \\MyServer.domain1.local\data and granted the everyone group read access.  People in both domains can access the share.

I then created a sub folder called  \\MyServer.domain1.local\data\finance

..remove permission inheritance, and setup two global security groups (one in each domain) with full control.

A user in domain2.local has logged off and on and I've confirmed the have the new security group.  However they can't see the sub folder.


Any ideas why?
0
Comment
Question by:detox1978
2 Comments
 
LVL 24

Accepted Solution

by:
Sandeshdubey earned 500 total points
ID: 39612133
Check the sub folder do the group in question have permission to access the same.

In order to add users in AD from one domain another domain either to computers/groups/AD,then you need to use AGDULP method. Also, add the DNS suffix in the clients NIC for faster domain location.

Add the User Accounts to Global Groups> Global Groups to Universal Group> Universal Groups to Domain Local Groups > Domain Local Groups to the group you want to assign the permission.http://technet.microsoft.com/en-us/library/bb742592.aspx
0
 
LVL 2

Author Closing Comment

by:detox1978
ID: 39617307
thanks
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Resolve DNS query failed errors for Exchange
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now