Problem accessing / mapping of shares in a different domain.

Posted on 2014-01-24
Last Modified: 2014-05-26
I have a single forest with multiple domains. (root domain) (child domain) (child domain)

I have a third party DNS server where all my clients point to.
The third party DNS server is synchronized with my child domains.
My client pc’s are joint to domain and can access/map any shares via name to a file server in the domain with no problems.

My problem is when users want to access/map shares to a file server in the domain they get error.
Logon unsuccessful:
The user name you typed is the same as the user name you logged in with.
That user name has already been tried. A domain controller cannot be found to very that user name.

When I use ip address of file server it works and when I try to access/map shares in domain from a pc which is not joint to domain it will ask for password and when I type in it works.

Please advice/help why can’t my pc’s joint to domain access/map shares to the file server in domain.

I can ping successfully the FQDN of file server and it can resolve ip address to name.
I also can resolve the DC.
My trust between domains is also working as I can use username and password of user in domain to access files in domain when pc is not joining to any domain.
Question by:ciscosupp
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 5
LVL 37

Expert Comment

ID: 39807547
To do what you are trying to do, just make dns host (A) record for file servers in us domain to dns servers (under zone) in uk domain and vice versa.

This will allow you to access file servers across domains by name such as \\server1

Single lable name will work within same domain or within workgroup environment fine in normal case but it will not work as expected between cross domains residing in different subnets


Author Comment

ID: 39808263
I tried no luck same problem.
I try mapping/accessing shared in other domain with FQDM and I can only use name as my dns suffix is added for the other domain.
I also can resolve ip to name and name to ip successfully of the fileserver
LVL 37

Expert Comment

ID: 39808516
That is true, if you add host (A) record for other domain file server in your dns zone, its FQDN will obviously be created as
But this is only available one of the best method.
once you created host (A) records, what important is it should be able to resolve to IP address of file server in another domain.

Can you please check on client computers and domain controllers advanced TCP/IP properties \ DNS tab for below.
ensure that "Append Primary and connection specific dns suffixes" radio button is selected
Ensure that "Append parent suffixes of primary dns suffix" checkbox is selected
Ensure that "register this connection addresses in Dns" checkbox is selected
If there is any deviation in the above settings, its probably you will face name resolution and connectivity issues

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!


Author Comment

ID: 39814799

In uk domain I have a file server called fileuk and in usa domain I have a file server called fileusa

So basically I have to create one A record in both dns zones and zone
Fileusa (FQDN zone
Fileuk (FQDN

Please advice if this is what you mean.
LVL 37

Expert Comment

ID: 39827553
yes, you are right


Author Comment

ID: 39863943
Ok tried it no luck.
It’s not a DNS problem as it can resolve name to it and ip to name with no problem of file server.

What else can be the problem any advice
LVL 37

Expert Comment

ID: 39864121
If you access shares via \\\share is it accessible ?
Do you have any firewall enabled between two domains or windows firewall on file servers that is blocking NetBIOS name resolution ?

If you ping hostname of us domain file server from uk domain, is it pings ?
If you ping FQDN of us domain file server from uk domain, is it pings ?


Author Comment

ID: 39906122
yes I can ping both servers from both different domains.
Records for both fileserver can also resolve from ip to name and name to ip.
LVL 37

Accepted Solution

Mahesh earned 500 total points
ID: 39907408
Download Portqueryui tool and check if required ports are opened from both domain controllers vice versa ?

If you get error here, you need to clear that 1st

Also verify DNS name resolution vice versa with both domain controllers
1.On your DNS, click Start, and then click Run.
2.In the Open box, type cmd.
3.Type nslookup, and then press ENTER.
4.Type set type=all, and then press ENTER.
5.Type _ldap._tcp.dc._msdcs.Domain_Name, where Domain_Name is the name of your domain and then press ENTER...if this resolves
5.Type _ldap._tcp.dc._msdcs.Domain_Name, where Domain_Name is the name of opposite domain and then press ENTER


Author Comment

ID: 39949965
will try it

Featured Post

Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article outlines the process to identify and resolve account lockout in an Active Directory environment.
Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question