Accessing shared folder in another domain? 1

[Tony414]

Hello,

Here is what I am trying to do. I have both 2003 and NT domain in the same location. I am still migrating over. I have a 2003 file server that is still part of my NT domain.

I need users that are part of my new 2003 domain access to the shared folder on the 2003 file server. I tried a few things with no luck. I also have created a 2-way trust between my NT domain and my 2003 domain. Any question, please ask and I hope I can answer them...

Any help would be greatly appreciated!

Thanks,
Tony

 

[lhuegele]

Do your users still have user accounts on the old NT domain? Did your domain trust get created? If so, it could be as simple as adding "NEWDOMAIN\domain users" to the permissions on the file share itself. Are you having trouble mapping this share, or just trouble with access rights?

 

[Tony414]

Do your users still have user accounts on the old NT domain? Yes

Did your domain trust get created? Yes, I created the trust on my 2003 domain.

Are you having trouble mapping this share, or just trouble with access rights? Both

Thanks for the quick reply...

Tony

 

[unclerico]

You said that you tried a few things, can you elaborate? What did you do on the NT domain in terms of trusts?

 

[Tony414]

I created a trust on both the NT side and a two-way trust on the 2003 side. Currently the 2003 file server is part of my NT domain. If I take that file server and join the 2003 domain, would that cause havoc as far as people from the NT domain trying to access files on it?

I added the user (2003 domain) to the permisssions of the share on the NT side. When I try and map that drive on that users pc (XP) I get a permissions error.

Thanks,
Tony

 

[Tony414]

Here is the error I get when trying to map the drive on the users XP machine (which is part of the 2003 domain).

"The mapped network drive could not be created because the following error has ocured.

Configuration information could not be read from the domain controller, either because the machine is unavailable, or access has been denied"

 

[unclerico]

have you tried mapping both by IP Address as well as hostname?

 

[Tony414]

Ok. That worked! Excuse my lack of knowledge but what is that telling me?

Thanks,
Tony

 

[unclerico]

you said that worked, meaning you used the IP Address instead of the host name? DNS is your culprit; you need to configure a forwarder. In your 2003 domain, go into DNS -> Right-click the computername -> Properties -> Forwarders tab -> Under the DNS domain: click New, type in the DNS domain name of the NT domain and click OK -> Under Selected domain's forwarder IP address list: type in the DNS server(s) IP Address(es) in your NT domain. You should be good to go after that is done, try to map to the DNS hostname of the 2003 Server in the NT domain. I might have missed a step in here so let me know if it worked out ok.

 

[Tony414]

Here is where I'm at right now.

"Under Selected domain's forwarder IP address list: type in the DNS server(s) IP Address(es) in your NT domain."

Actually my NT domain points to my 2003 DNS (10.81.0.38). Is this the ip I should be putting in there? I tried putting that in, but it wouldn't take it. Or are you saying I should be putting the ip of the NT domain controller?

Thanks,
Tony

 

[unclerico]

Ok, well then that kind of changes things a little bit. In DNS, do you have a zone configured for your NT domain?

 

[Tony414]

No, I do not have a zone configured for my NT domain.

Currently my XP clients point to my 2003 DNS. If that even matters.

 

[Tony414]

Ok. I have been trying to add my NT domain to a zone on my DNS. I'm a little stuck. Any help on that?

Thanks,
Tony

 

[Tony414]

Ok. Let me shed somemore light on this. I figured out the problem. When I migrated the user account from NT over to 2003 server I must have did something wrong. On one of the users I was having the problem with, I deleted their account on the 2003 and re-added it. Now I'm not having the share problem.

So now my question is this. How can I fix this without having to redo all the user accounts? Is there even a way?

Thanks in advance!
Tony

 

[Tony414]

Can anyone shed some light on this?

Thanks,
Tony

 

[lhuegele]

I don't think we have enough information from you in order to help further. The domain trust must be in place and working. You need the DNS zones from both domains propagated in the other domains. The error you're getting is related to the fact that your user can't access the domain controller on the other side.

Do you have secondary lookup zones in DNS for each domain on both sides of the trust?

 

[Tony414]

Well, I already determined it was the migration of user accounts that caused this. I don't believe I did it correctly. So I have these user accounts on my 2003 box. Once I create one over it works find. So without creating it over is there a way for me to fix this?

Thanks,
Tony