?
Solved

Accessing share across two domains

Posted on 2013-10-30
2
Medium Priority
?
469 Views
Last Modified: 2013-11-01
Hi All,

This should be straight forward, but I can't think why its not working.

We have two domains.  We'll call  them domain1.local and domain2.local

There's a two external non-transitive trusts setup between the two domains.

I've shared out a folder called  \\MyServer.domain1.local\data and granted the everyone group read access.  People in both domains can access the share.

I then created a sub folder called  \\MyServer.domain1.local\data\finance

..remove permission inheritance, and setup two global security groups (one in each domain) with full control.

A user in domain2.local has logged off and on and I've confirmed the have the new security group.  However they can't see the sub folder.


Any ideas why?
0
Comment
Question by:detox1978
2 Comments
 
LVL 24

Accepted Solution

by:
Sandeshdubey earned 2000 total points
ID: 39612133
Check the sub folder do the group in question have permission to access the same.

In order to add users in AD from one domain another domain either to computers/groups/AD,then you need to use AGDULP method. Also, add the DNS suffix in the clients NIC for faster domain location.

Add the User Accounts to Global Groups> Global Groups to Universal Group> Universal Groups to Domain Local Groups > Domain Local Groups to the group you want to assign the permission.http://technet.microsoft.com/en-us/library/bb742592.aspx
0
 
LVL 2

Author Closing Comment

by:detox1978
ID: 39617307
thanks
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question