+ Post New Thread
Results 1 to 6 of 6
Windows Server 2008 Thread, Server 2008 AD issue across forest trust with Server 2003 R2 AD in Technical; We have 2 seperate Domains with a forest level trust. On one Domain we have 3 Server 2003 R2 DC's. ...
  1. #1

    Join Date
    Sep 2008
    Posts
    2
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Server 2008 AD issue across forest trust with Server 2003 R2 AD

    We have 2 seperate Domains with a forest level trust. On one Domain we have 3 Server 2003 R2 DC's. On the other Domain we have 1 Server 2008 DC. The trust works just fine as I can browse each Domain from the other, however I need to add user access to the shares on each Domain... I upgraded the 2003 R2 AD Schema to the 2008 AD Schema using adprep /forestprep, so that all the AD's have the same Schema. When I try to add a user to a share, I am able to change the Location to the other Domain, but my problem is that I cannot add a user to any shares from one Domain to the other Domain and vice-versa. Any advice would be appreciated.

  2. #2

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,758
    Thank Post
    825
    Thanked 1,662 Times in 1,447 Posts
    Blog Entries
    11
    Rep Power
    441
    do you get any error messages? can you see any users from the other domain at all?

  3. #3

    Join Date
    Sep 2008
    Posts
    2
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    no errors at all. on a share, when i chose the sharing tab, or permissions and try to add a user from "Select Users, Computers or Groups", i can choose the other domain from the "Locations" button, but when i type in administrator (or any other user) and then select the "Check Name" button, I get "Name Not Found"

    Specifically:

    An object named "administrator" cannot be found. Check the selected object types and location for accuracy and ensure that you typed the object name correctly, or remove this object from the selection.

  4. #4

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,758
    Thank Post
    825
    Thanked 1,662 Times in 1,447 Posts
    Blog Entries
    11
    Rep Power
    441
    What happens when you do a search with nothing typed in?

    z

  5. #5
    Oops_my_bad's Avatar
    Join Date
    Jan 2007
    Location
    Man chest hair
    Posts
    1,738
    Thank Post
    438
    Thanked 53 Times in 50 Posts
    Rep Power
    30
    Not 100% sure but won't you have to run your 2008DC in 2003 forest functional mode in order to keep forest compatibility

  6. #6

    m25man's Avatar
    Join Date
    Oct 2005
    Location
    Romford, Essex
    Posts
    1,617
    Thank Post
    49
    Thanked 448 Times in 331 Posts
    Rep Power
    136
    Is the Trust in place and verified?
    Just because it's there does not mean it's working.

    I have had problems in the past establishing trusts between disparate domains.

    The trick is to create an identical Domain Admin level account in both domains and use this to establish the domain trust.

    I would also check/verify/re-establish the trust using this account.
    Make sure the clocks are in sync between domains and the time zones match.
    Be sure that each DC in each domain can ping each other by Name and IP.
    Eg dc1.xyz.com > dc1.abc.com
    If your DNS is not configured to do the lookups between your domains KDC,Keberos,LDAP all fail and you will not get the results you are expecting.

SHARE:
+ Post New Thread

Similar Threads

  1. New server - 2003 or upgrade to 2008 ??
    By pooley in forum Windows Server 2008
    Replies: 27
    Last Post: 10th June 2008, 12:58 PM
  2. Running Pars over forest trust
    By spik376 in forum MIS Systems
    Replies: 1
    Last Post: 8th February 2008, 12:15 AM
  3. Replies: 3
    Last Post: 6th October 2007, 10:30 AM
  4. Server 2003 strange disk space issue.
    By starscream in forum Windows
    Replies: 12
    Last Post: 3rd August 2007, 12:07 AM
  5. Exchange 2003 and Server 2003 SP1 issue.
    By tosca925 in forum Windows
    Replies: 0
    Last Post: 21st August 2005, 10:32 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •