getting users from another domain

[stfaprc]

I have Win2008 setup as a stand-alone domain. How can I get the Win2008 to see the users from our LAN's PDC?

When I click the 'Locations' button in the "Add Users" screen, the only domain that shows up is the Win2008 itself. I tried typing in DOMAIN\User1 into the list, but the system will not accept it as valid.

Is there a Admin page somewhere where I can setup a lookup using the LAN's PDC ?

 

[58sniper]

[google]domain trusts[/google]

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.ucblogs.net/blogs/exchange/

 

[stfaprc]

thanks for the search criteria.
hmm, I might be up a creek with no paddle on this one.

PDC pc is called ORIGINAL
the PDC Domain is THISISUSD

the win2008 belongs to workgroup NEW_COMER

both pc's are in the same ip address space and NEW_COMER can map directories on ORIGINAL by using login credentials on ORIGINAL, so I know they can see and talk to each other.

When I try to add NEW_COMER as Trusted Domain on ORIGINAL, I get an error message that domain name could not be found
(Trusting does work).

When i try at the win2008 pc:
netdom trust NEW_WEB /Domain:THISISUSD /ADD
or
netdom trust NEW_WEB /Domain:ORIGINAL /ADD

an error message of:
"The specified domain either does not exist or could not be contacted".

The Windows firewall on the win2008 is not popping up that it is blocking anything.

So, I am stumped at this point. Am I missing something? Is there a firewall setting I need to change? Is what I want to do actually possible?

 

[stfaprc]

I'm probably going about this wrong, as I am approaching from a linux and nt4 frame of reference.

I want to setup the server so that certain users have certain access to several directories, including web clients. For the web clients, .htaccess would probably work - is there a Win2008 equivalent to the .htaccess procedure ?

For regular users on the LAN, settting up a user account makes for quite a mess when logging into the server , as each user shows up. Is there a way to setup a user so that there is no terminal access and therefore no icon for the user when logging in?

 

[stfaprc]

oh, forgot to mention. there is an LDAP server in the ip address space that is currently just being used for internal email lookups. But I didn't see a reference to using LDAP in the Win2008 help.

 

[markdmac]

You can't enable a trust because that machine is in a workgroup, not a domain.

Why don't you just make the server a member of the domain and be done with it?

Also, just for a point of reference, there are no PDC's anymore. Just DCs (with FSMO roles) and member servers. PDC's went away with Windows 2000.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[stfaprc]

excuse me, but I was trying to connect to to a PDC.

 

[58sniper]

That doesn't answer Mark's question.

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.ucblogs.net/blogs/exchange/

 

[pagy]

As Mark said;

Add the Windows 2008 server to the domain THISISUSD as a member server..

Paul
MCSE 2003
MCSA 2003
MCITP Enterprise Administrator

If there are no stupid questions, then what kind of questions do stupid people ask? Do they get smart just in time to ask questions?
Scott Adams