2000 External Trust problem

[paulhthomas]

Hi all, I've got a weird one, or at least I think it's weird!
I'm going through the Exchange 2003 MS press book and in Chapter 5 it asks you to build a new 2000 domain and forest called Fabrikam.com.
I'e gone through and set up 2 external trusts betwee the domains and everything seemed to be fine.
I can logon to either domain, when browing My Network Places, I can see both domains and browse servers in the other domain with no problems.
Howver, as part of an exercise in the book it tells me to add the Administrator accoutn from 1 domain into the Schmea admins, Enterprise Admins and Domain Admins in the toher domain. When I go into ADUC I don't get the option to select any accounts from the other domain.
The 2 domains are in 2000 Mixed Mode.

Can anybody point me in the right direction here?

Thanks

Paul

Paul Thomas
Network+ - Passed
70-210 - Passed
70-290 - Passed
70-291 - Passed
70-293 - Passed
70-294 - Passed
70-284 - Working Towards

 

[paulhthomas]

Ok, I've found that I needed to raise the DFL to 2000 Native Mode but I still can't add the account to the groups in the other domain.

Any ideas?

Paul Thomas
Network+ - Passed
70-210 - Passed
70-290 - Passed
70-291 - Passed
70-293 - Passed
70-294 - Passed
70-284 - Working Towards

 

[itsp1965]

I ran into this when setting up a trust between domains also. Have you tried creating a root hint on the forest's DNS server so that it has a pointer to the DNS server on the other forest. Try that to see if it resolves the issue

 

[paulhthomas]

yeah tried that, had to do that before I could actually set up the trust.
What I have noticed is that if I create a domain local accoutn I can access the other domain and add the accounts I want, but it will not let me add to a global / universal group as apparently it should allow me to in native mode.


Paul Thomas
Network+ - Passed
70-210 - Passed
70-290 - Passed
70-291 - Passed
70-293 - Passed
70-294 - Passed
70-284 - Working Towards