Solved

one way trust

Posted on 2014-12-24
6
65 Views
Last Modified: 2015-01-17
Hi

I just setup a one way trust, what do I need to do to get users (Enterprise Admins) from the other domain to log into the domain controller in the other forest?
0
Comment
Question by:Jack_son_
  • 2
  • 2
  • 2
6 Comments
 
LVL 17

Expert Comment

by:Tony Massa
Comment Utility
Trusts grant no rights across trusting domains.  It only allows users to authenticate across domains.  You would have to add users to a group that grants the permissions that allow them to log on to domain controllers.  For example, add the users to "Account Operators", "Domain Admins", or "Enterprise Admins" (you should not do this, generally.)

If at all possible, never let "standard" user accounts log on to domain controllers or add them to sensitive groups.  Always require a secondary, administrative account for elevated access to domains/domain controllers.
0
 

Author Comment

by:Jack_son_
Comment Utility
I can see the domain, although it will not allow me to see the users under the other domain.    Then when I rdp to the dc, it says the trust relationship failed.
0
 
LVL 27

Expert Comment

by:Steve
Comment Utility
check you've got the trust the right way around.
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 
LVL 17

Expert Comment

by:Tony Massa
Comment Utility
Remember, trust direction is opposite of access direction.
If you want DOMAIN-A users to log on to DOMAIN-B, then you need to set up an INCOMING trust on DOMAIN-A or an OUTGOING trust on DOMAIN-B.

http://technet.microsoft.com/en-us/library/cc794933%28v=ws.10%29.aspx

As totallytonto mentions, you likely have the trust direction going the wrong way.
0
 

Author Comment

by:Jack_son_
Comment Utility
Actually it connected for a bit, but now it says it cant reach the controllers.  This is pingable between the locations.  Perhaps there are additional DNS settings beyond what i setup?
0
 
LVL 27

Accepted Solution

by:
Steve earned 500 total points
Comment Utility
have you set the DNS forwarders for each domain's DNS servers so they can forward DNS requests for the other domain to the right DNS server?
0

Featured Post

Too many email signature updates to deal with?

Do you feel like you are taking up all of your time constantly visiting users’ desks to make changes to email signatures? Wish you could manage all signatures from one central location, easily design them and deploy them quickly to users? Well, there is an easy way!

Join & Write a Comment

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now