Re: Access Denied with an external Trust

From: Dan (dvalenti54_at_hotmail.com)
Date: 04/20/04 

Date: Mon, 19 Apr 2004 20:45:55 -0500

I remember messing with IPsec is there a way to turn it off, I set the
option Do not use IPSEC under the TCP/ip Properties but still the same.
"Dan" <dvalenti54@hotmail.com> wrote in message
news:e1tQJcnJEHA.1392@TK2MSFTNGP09.phx.gbl...
> i did setup IPSEC i wonder if that is the issue.
> "Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
> news:8S_gc.29757$ru4.30191@attbi_s52...
> > Assuming you have your dns set up correctly [and maybe wins if it is not
a
> small
> > network], try adding that account to the domain users group in the other
> domain. Also
> > try accessing the share via IP address as in \\xxx.xxx.xxx.xxx\sharename
> in case of a
> > name resolution problem. Other things that can be causing lack of access
> would be
> > incompatible security options such as ipsec negotiation policies, lan
> manager
> > authentication level, smb signing [have client/server digitally sign
> communications
> > set to always when the other computer can not comply], and the option
for
> > "additional restrictions for anonymous access" being set to no access
> without
> > explicit anonymous permissions in certain situations. --- Steve
> >
> >
> > "Dan" <dvalenti54@hotmail.com> wrote in message
> > news:O0lNhumJEHA.1000@TK2MSFTNGP11.phx.gbl...
> > > I have two windows 2000 DC. one called domain1.local and the other
> called
> > > domain2.com. I setup an external trust between the two domains. I
> > > Authenticate to domain2.com and i created a share on domain1.local and
> gave
> > > my account admin@domain2.com full access to this share but when i try
to
> > > access it from a mapped drive it says access denied. Dont know what im
> doing
> > > wrong.
> > >
> > >
> >
> >
>
>

Relevant Pages

  • IPSec Question
    ... I have been messing around on a test server looking into ... First I created an implicit deny rule for all ... My gut is telling me that IPSec only allows 24-bit IP's ...
    (microsoft.public.win2000.security)
  • Re: Domain Isolation Security using IPSEC
    ... Note that ipsec negotiation policies ... must exempt domain controllers from policies that involve domain members by ... > gives technical details, ...
    (microsoft.public.security)
  • Thanks for the info
    ... I am not going to use IPSec. ... going to look into using our Symanyec VPN Appliance box to ... the TCP/IP properties and use the filtering and other ...
    (microsoft.public.inetserver.iis.security)