Solved

Domain and trust between two domains but list users only from one side.

Posted on 2014-10-12
11
77 Views
Last Modified: 2015-04-15
Drawing1.jpg1.PNG2.PNG3.PNGHello Experts ,
I have a problem with the domain and trust relationship between two different domains as you can see in drawing1.jpg >> we did trust between domain A and domain B  and it's successfully created >> Domain "A" has multiple sites >> domain B has one site ..The problem is when we list the resources "Users ,computers..etc " of domain B from Domain A it's listing them but it did not list users,computers of domain A from domain B and it asks you to enter user name and password ,when you enter any Enterprise admin of domain A or domain B it shows to you "Access is denied " and images number 1,2,3 logged in the event viewer
Please bear in mind the following items
1-Stub zone created on both domains.
2-we did the same configurations in new domain"test.com " in the same physical location as domain A  <<we did Trust between Domain B and Test .com and it worked fine "listing the resources  " from both sides.
3-VMware Tools has been removed from all servers.
4-Firewall is off on both domains.
5-subnets crated for all sites.
6-They have the same forest and domain functional level 2003.
7-Domain A has windows server 2003 and domain B windows server 2008.

Please advise about this issue..Thanks.
0
Comment
Question by:Mahmoud Noubani
  • 3
  • 2
  • 2
  • +2
11 Comments
 
LVL 78

Expert Comment

by:David Johnson, CD, MVP
ID: 40376183
break / remove your trust and then create a 2 way transitive trust again
0
 

Author Comment

by:Mahmoud Noubani
ID: 40376319
Hello david ;
Thanks for your reply I did that many times and created forest ;transitive ;one way trust incoming ;and one outgoing with the same results "error message "
0
 
LVL 9

Expert Comment

by:Zacharia Kurian
ID: 40376374
It seems to be an authentication permission issue. Have you verified the domain B has proper authentication permission in Domain A?
0
 

Author Comment

by:Mahmoud Noubani
ID: 40376417
Yes Zacharia,
We use Domain admin user of domain A and domain B ,enterprise admin of A and B also.
0
 
LVL 13

Expert Comment

by:Abduljalil Abou Alzahab
ID: 40399132
What is the Domain Function Level and Forest Function Level for domain B ?
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 38

Accepted Solution

by:
Aaron Tomosky earned 500 total points
ID: 40400349
according to this:
http://technet.microsoft.com/en-us/library/cc816810%28v=ws.10%29.aspx

you have to do some DNS magic, have you done one of these options?
To create a forest trust successfully, you must set up your Domain Name System (DNS) environment properly. If there is a root DNS server that you can make the root DNS server for the DNS namespaces of both forests, make it the root DNS server by ensuring that the root zone contains delegations for each of the DNS namespaces. Also, update the root hints of all DNS servers with the new root DNS server.

If there is no shared root DNS server and the root DNS servers for each forest DNS namespace are running Windows Server 2003, configure DNS conditional forwarders in each DNS namespace to route queries for names in the other namespace.

If there is no shared root DNS server and the root DNS servers for each forest DNS namespace are not running Windows Server 2008 or Windows Server 2003, configure DNS secondary zones in each DNS namespace to route queries for names in the other namespace. For more information about configuring DNS to work with Active Directory Domain Services (AD DS), see the DNS Support for Active Directory Technical Reference (http://go.microsoft.com/fwlink/?LinkID=106660).
0
 
LVL 13

Expert Comment

by:Abduljalil Abou Alzahab
ID: 40400443
Hello,
Also to create a forest trust, the minimum forest functional level for the forests that are involved in the trust relationship is Windows Server 2003.

For more information about trust requirements:
http://technet.microsoft.com/en-us/library/cc816810(v=ws.10).aspx
0
 
LVL 38

Expert Comment

by:Aaron Tomosky
ID: 40400452
Abduljalil, the information in both of your last 2 comments is already in the original question.
0
 
LVL 9

Expert Comment

by:Zacharia Kurian
ID: 40404493
The problem is when we list the resources "Users ,computers..etc " of domain B from Domain A it's listing them but it did not list users,computers of domain A from domain B

What kind of trust have you created? Could you please give  more details?

Are you sure that the  "DNS"  records are been populated properly in your forests?

Did you make sure the domain admins have proper authentications rights  on each forest?
0
 
LVL 9

Expert Comment

by:Zacharia Kurian
ID: 40404504
Just for you clarification with regard to the trusts please have a look into the below link.

http://www.edwardsd.co.uk/work/2012/02/domain-trusts-guide/

I believe that you have created only "one way trust" which allows you only to access Domain B from Domain A. Is this your requirement or do you want to have access vise versa?
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

I was asked if I could set up a fax machine so that incoming faxes were delivered to people's Exchange inboxes and so that they could send faxes from their desktops without needing to print the document first.  I knew it was possible but I had no id…
You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now