?
Solved

one way trust

Posted on 2014-12-24
6
Medium Priority
?
79 Views
Last Modified: 2015-01-17
Hi

I just setup a one way trust, what do I need to do to get users (Enterprise Admins) from the other domain to log into the domain controller in the other forest?
0
Comment
Question by:Jack_son_
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
6 Comments
 
LVL 17

Expert Comment

by:Tony Massa
ID: 40517295
Trusts grant no rights across trusting domains.  It only allows users to authenticate across domains.  You would have to add users to a group that grants the permissions that allow them to log on to domain controllers.  For example, add the users to "Account Operators", "Domain Admins", or "Enterprise Admins" (you should not do this, generally.)

If at all possible, never let "standard" user accounts log on to domain controllers or add them to sensitive groups.  Always require a secondary, administrative account for elevated access to domains/domain controllers.
0
 

Author Comment

by:Jack_son_
ID: 40521156
I can see the domain, although it will not allow me to see the users under the other domain.    Then when I rdp to the dc, it says the trust relationship failed.
0
 
LVL 27

Expert Comment

by:Steve
ID: 40521562
check you've got the trust the right way around.
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 17

Expert Comment

by:Tony Massa
ID: 40523051
Remember, trust direction is opposite of access direction.
If you want DOMAIN-A users to log on to DOMAIN-B, then you need to set up an INCOMING trust on DOMAIN-A or an OUTGOING trust on DOMAIN-B.

http://technet.microsoft.com/en-us/library/cc794933%28v=ws.10%29.aspx

As totallytonto mentions, you likely have the trust direction going the wrong way.
0
 

Author Comment

by:Jack_son_
ID: 40524817
Actually it connected for a bit, but now it says it cant reach the controllers.  This is pingable between the locations.  Perhaps there are additional DNS settings beyond what i setup?
0
 
LVL 27

Accepted Solution

by:
Steve earned 2000 total points
ID: 40531180
have you set the DNS forwarders for each domain's DNS servers so they can forward DNS requests for the other domain to the right DNS server?
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Suggested Courses
Course of the Month12 days, 5 hours left to enroll

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question