Solved

one way trust

Posted on 2014-12-24
6
73 Views
Last Modified: 2015-01-17
Hi

I just setup a one way trust, what do I need to do to get users (Enterprise Admins) from the other domain to log into the domain controller in the other forest?
0
Comment
Question by:Jack_son_
  • 2
  • 2
  • 2
6 Comments
 
LVL 17

Expert Comment

by:Tony Massa
ID: 40517295
Trusts grant no rights across trusting domains.  It only allows users to authenticate across domains.  You would have to add users to a group that grants the permissions that allow them to log on to domain controllers.  For example, add the users to "Account Operators", "Domain Admins", or "Enterprise Admins" (you should not do this, generally.)

If at all possible, never let "standard" user accounts log on to domain controllers or add them to sensitive groups.  Always require a secondary, administrative account for elevated access to domains/domain controllers.
0
 

Author Comment

by:Jack_son_
ID: 40521156
I can see the domain, although it will not allow me to see the users under the other domain.    Then when I rdp to the dc, it says the trust relationship failed.
0
 
LVL 27

Expert Comment

by:Steve
ID: 40521562
check you've got the trust the right way around.
0
Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

 
LVL 17

Expert Comment

by:Tony Massa
ID: 40523051
Remember, trust direction is opposite of access direction.
If you want DOMAIN-A users to log on to DOMAIN-B, then you need to set up an INCOMING trust on DOMAIN-A or an OUTGOING trust on DOMAIN-B.

http://technet.microsoft.com/en-us/library/cc794933%28v=ws.10%29.aspx

As totallytonto mentions, you likely have the trust direction going the wrong way.
0
 

Author Comment

by:Jack_son_
ID: 40524817
Actually it connected for a bit, but now it says it cant reach the controllers.  This is pingable between the locations.  Perhaps there are additional DNS settings beyond what i setup?
0
 
LVL 27

Accepted Solution

by:
Steve earned 500 total points
ID: 40531180
have you set the DNS forwarders for each domain's DNS servers so they can forward DNS requests for the other domain to the right DNS server?
0

Featured Post

Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Synchronize a new Active Directory domain with an existing Office 365 tenant
In-place Upgrading Dirsync to Azure AD Connect
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

861 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question