Account resolution in NT and 2k3 trust problem

[solomonking]

I have a two way trust between an NT4 domain and 2k3 domain. When I grant a 2k3 account access to a NT4 resource it will browse the 2k3 directory and add the account to the ACL, but when I close and go back in it shows "??? Account Unknown". Why doesn't it continue to resolve the account name?
Thanks

 

[solomonking]

I found that it was a domain controller setting for allow anonymous sid/name translation that our security template changed to disabled when it was applied. I put it back to enabled and the names show up.