Windows 2000 Server & NT4 Trust Relationship

From: Matt (mattsp1_at_yahoo.co.uk)
Date: 10/24/03 

Date: Thu, 23 Oct 2003 23:37:59 -0700

I know this is a discussion group on security and I am
going to ask a question on Trust Relationships but I
believe it is a problem with security.

I have a windows 2000 domain and an nt4 domain with two
way trusts. The trust is working. I can log in to each
of the domains with the correct user name and password
but as a windows 2000 administrator I cant load user
manager for the NT4 domain. It is saying "access
denied". I have checked the permissions and they all
seem ok. I have noticed that on the NT server the Admin
shares (c$ d$ etc) have been removed either manually or
by using the system policy editor. If I am certain that
the permissions are correct is there something that could
be over riding the permissions I have given myself?

Is there something that the NT4 admin staff could have
dont that inadvertidly is denying me access to user
manager using the trust, which did verify ok.

Any ideas?

Thanks
M

Relevant Pages

  • Re: External trusts between domains are there any risks?
    ... The trust is to allow the NT4 domain users to access limited resources in the WIN2k domai, this will be file shares on a single server. ... In one direction you can enumerate every account/computer a domain has, in the other you can access file shares and applications that depend on Windows security that aren't properly secured. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain was in the wrong state to perform the security operation
    ... You may need to change the security ... option for "let everyone permissions apply to anonymous users" to ENABLED. ... > other being sure that the W2003 domain controllers are also wins clients so that ... > experienced Active Directory people over there that know a lot about trust issues. ...
    (microsoft.public.win2000.security)
  • Re: Confusion about .Net AllowPartiallyTrustedCallers (IE).
    ... To get around the security exceptions that occur; ... The assumption is that strong named assemblies will often have more ... more permissions to perform this task. ... have Full Trust. ...
    (microsoft.public.dotnet.security)
  • Re: Running from network drive
    ... permission to full trust ... have both 1.0 and 1.1 you should try setting the permissions on both. ... > disabling security completely through caspol. ... in the .Net Configuration tool I click on my assembly to ...
    (microsoft.public.dotnet.security)
  • RE: Users unable to browse trusted domain
    ... If I go into server manager on the NT4 Domain Controller, ... This is since I created the trust to the 2003 Domain and migrated one ... you might not have permission to use this network ...
    (microsoft.public.windows.server.migration)