Re: User account management and information functions usage with trusted domains

From: Rhett Gong [MSFT] (v-raygon_at_online.microsoft.com)
Date: 11/24/05 

Date: Thu, 24 Nov 2005 07:10:16 GMT

Could you use setspn to see what spn you registered for the target computer and if the value you passed is correctly?
Following article provides a good sample for this question, you may download and try it for kerberos authentication.
http://msdn.microsoft.com/msdnmag/issues/0800/security/default.aspx

In my domain and trusted domain, all tests work fine. Since it is a bit complicated to configure a good test environment, you
may try post joint domain configuration problem firstly to windows.server.networking and see if some of resourcekit could work
fine, eg.
netdiag /test:dsgetdc /d:DomainName /v

Thanks,
Rhett Gong [MSFT]
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
http://support.microsoft.com/default.aspx?scid=/servicedesks/msdn/nospam.asp&SD=msdn

This posting is provided "AS IS" with no warranties and confers no rights.