Domain Trust

[penauroth]

This is a tough one.

I have mobile Domain users that use resources on other Domain/Workgroup networks. When they are logged into their domain profile and attempt to access external Domain/Workgroup resources the receive an error: "There are no logon servers to fulfill the request" or something to that effect. I know, by convention, their system will automatically look for a DC when they attempt to access a resource regardless if it is part of the Domain or not.

How can I allow mobile users - through trusts or GP - to use resources external to the domain or authenticate to an unknown logon server?

Please let me know if further information is required. Thanks.

Paul

Work on Windows, play on Linux.

 

[adcfaq]

not a tough one, check validate domain trust relationship.

 

[penauroth]

Where can I find this setting. I am not finding anything on MS or Google? Thanks.

Paul

Work on Windows, play on Linux.

 

[adcfaq]

on win2k3 domain, you can validate the trust to by going domain.msc. on NT4, you can't validate the trust.

 

[penauroth]

Thanks benlu but this does not solve my problem. Maybe I failed to mention that mobile users need the ability to access resources on unknown domains or workgroups.

For example, mobile user has a domain profile to access resources at the company office - user has no problem accessing domain resources. Mobile user spends 75% of his time at his home office. User attempts to access one of his home desktop systems on her peer-to-peer network to use a printer or access a network share. When user attempts to access the home desktop computer (via logon dialog box) she receives the error message: "There are no logon servers available to service the logon request."

How can I allow the mobile user to access the resources on their home network without validating credentials to the DC? By the way, half our company are mobile users. Thanks.

Paul

Work on Windows, play on Linux.

 

[rodentcentre]

I had this problem in my environment when my audit teams would hook up in peer-to-peer configurations with a mix of Windows 2000 Pro and Windows XP Pro...the only way I could get around this issue was to have everyone log on to his/her machine locally, change the IP Addresses to 10.0.0.X and it worked just fine. The wierd thing is this didn't happen to everyone. Probably not the best workaround but it worked.

 

[aftertaf]

isn't there a setting in GPO on the domain that lets them logon when a DC is not available?

Aftertaf
________
Regain control of your PC, at

http://www.debian.org

If you break your hard drive, it'll be DPlank's fault