Re: Access Denied with an external Trust

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 04/20/04 

Date: Tue, 20 Apr 2004 01:16:52 GMT

Assuming you have your dns set up correctly [and maybe wins if it is not a small
network], try adding that account to the domain users group in the other domain. Also
try accessing the share via IP address as in \\xxx.xxx.xxx.xxx\sharename in case of a
name resolution problem. Other things that can be causing lack of access would be
incompatible security options such as ipsec negotiation policies, lan manager
authentication level, smb signing [have client/server digitally sign communications
set to always when the other computer can not comply], and the option for
"additional restrictions for anonymous access" being set to no access without
explicit anonymous permissions in certain situations. --- Steve

"Dan" <dvalenti54@hotmail.com> wrote in message
news:O0lNhumJEHA.1000@TK2MSFTNGP11.phx.gbl...
> I have two windows 2000 DC. one called domain1.local and the other called
> domain2.com. I setup an external trust between the two domains. I
> Authenticate to domain2.com and i created a share on domain1.local and gave
> my account admin@domain2.com full access to this share but when i try to
> access it from a mapped drive it says access denied. Dont know what im doing
> wrong.
>
>

Relevant Pages

  • Re: Several user accounts cant authenticate to secured wireless n
    ... Acess Policy. ... It applies to Domain Users group, but I am not is the group. ... I am only in Domain Administrators group and that's why I can't logon. ... > user account as a user that works and compare their group membership. ...
    (microsoft.public.security)
  • Re: File Share resource failed to start
    ... > I understand this is an access denied error - I added the cluster service ... > account to the direcotries in question and all worked fine. ... > directories in question did not have the Domain USers group in the ACL. ... > The depenedices for all shares are the same.... ...
    (microsoft.public.windows.server.clustering)
  • File Share resource failed to start
    ... The cluster file share resource failed to start. ... I understand this is an access denied error - I added the cluster service ... account to the direcotries in question and all worked fine. ... The 3 directories that were working had the Domain Users group however, ...
    (microsoft.public.windows.server.clustering)
  • Re: How effective is a router as a firewall?
    ... > Normal use of a computer must never take place using a privileged account. ... the workstation local admins group often contains the ... Domain Users group - this allows users at those workstations to install ... The idea that you should never run under and Administrators Group ...
    (comp.security.firewalls)
  • Re: File Share resource failed to start
    ... >> account to the direcotries in question and all worked fine. ... >> directories in question did not have the Domain USers group in the ACL. ... the service accounts needs access to the resource. ... > the other cases and in the two cases where it failed, the permissions were ...
    (microsoft.public.windows.server.clustering)