DFS between Trusted Domains

layout:
domain call fox.net
domain b call hound.net
domain 2003 domain dfs roots on 2 servers. both dfs roots domain controllers.
domain b 2003 domain no dfs.
domain has outgoing, one-way trust, selective authentication enabled domain b. allows domain b users access resources within domain a.

i want users in domain b able access dfs in domain a.

have enabled "allowed authenticate" on 2 dfs roots in domain users in domain b.
have enabled "allowed authenticate" on all other domain controllers in domain (for other reasons)
have configured share , security permissions on dfsroots directory on 2 dfs roots in domain read, list, read & execute.

domain b workstation, following when type:

\\fox.net\                      =    see netlogon & sysvol

\\ip address\             =    see netlogon, sysvol, & dfsshare, when double click dfsshare below error message ****

****error message reads: "\\ip address\share not accessible. might not have permission use network resource. contact administrator of server find out if have access permisions.          configuration information not read domain controller, either becouse machine unavailable, or access had been denied."

can open , navigate sysvol , netlogon folders fine.

i want users in domain b able access dfs in domain a.

thanks.

hi,

 

can tell if domaina , domainb belong same forest? if not, please verify set trust type on domain domain-wide authentication to authenticate domain b’s users access, , meanwhile please check verify have granted dfsroot directory domainb users (hound.net) read, list, read & execute.

 

with above configuration, may test to see if can access dfs root in domain \\domaina\domainrootname domain b.

 

hope helps.

---

this posting provided "as is" no warranties, , confers no rights.

Windows Server  >  File Services and Storage