[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 81
  • Last Modified:

Two Way Domain Trust - ACL Problem on One Server

I've googled this for a few hours now and I haven't been able to solve this problem.

Domains are ole.local and ept.local.  Two way domain trust. Trust type = Forest, Transitive = Yes.

Both domains have stubs in DNS to resolve to each other. I can ping the root domain ole.local from ept,local and it resolves with one of ole.local's DNS servers and visa versa.  I can add a user or group (from ept.local) to the ACL of an ole.local shared folder on any of the three Windows 2008R2 or 2012 servers at OLE.

I can add a user or group (from ole.local) to the ACL of a ept.local shared folder to all (server 2008 and 2012) but one server 2008R2 machine. When I try this on any of the folders on this machine I get the error "The Active Directory Domain Controllers required to find the selected objects in the following domains are not available: ole.local"...  I have confirmed that I can ping from this server the root of the ole.local domain. Again I can add an ole.local user on the other servers at ept with no issue.

Can anyone shed some light on this situation?

Thanks
Rob
0
robertgibson
Asked:
robertgibson
1 Solution
 
MaheshArchitectCommented:
Instead of using stub zone, either use conditional forwarding or secondary zone both side for cross forest name resolution

It might be possible that while resolving other domain users, DC to DC communication not happening because stub zone may resolve to some other DC for which AD ports are not opened
0
 
robertgibsonAuthor Commented:
Based on your comment I went back and checked the two DNS servers on the ept.local side.  One still had an old record in there referencing an old DC.  Once I did a reload it suddenly worked.

Thanks
Rob
0

Featured Post

Free tool for managing users' photos in Office 365

Easily upload multiple users’ photos to Office 365. Manage them with an intuitive GUI and use handy built-in cropping and resizing options. Link photos with users based on Azure AD attributes. Free tool!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now