Access Denied

[mfaheem74]

Hi

I've an existing WinNT4 Domain and a newly created Windows
2003 A/D Domain in native mode.

I have created a two-way trust relationship between both
domains, have migrated couple of user from old domain to
new domain using ADMT & now starting branch office.

The problem i am facing is branch office users have home
drives & profiles hosted on NT 4.0 BDC in branch office -
After user migration to A/D, branch office users are not
able to access any share / home drive on NT BDC at brach
office.

When I use "net view \\the_server" command, I receive a

system error 5, access denied message.

I am able to ping by name from both the sites.

Will appreciate any help.

Thanks
Faheem

 

[vbrocks]

Give them the same password for both domains....
Make sure they are members of Global or universal groups, Domain local groups can only access their own domains.

 

[GlenJohnson]

I've an existing WinNT4 Domain and a newly created Windows 2003 A/D Domain in native mode. vbrocks is probably correct, but this is Microsoft: Windows 2000 Server Forum, not NT or 2003. You may want to post this in the other forums in case something has changed between the os's. Good luck.



Glen A. Johnson
If you're from Northern Illinois/Southern Wisconsin check out Tek-Tips in Chicago, Illinois Forum.

TTinChicago

http://www.johnsoncomputers.us

 

[mfaheem74]

Thanks vbrocks, in my situation i have migrated the users with passwords so they are same; I have also migrated the SIDs and groups - and thought that migrated users should able to access the resource as they were.

I am getting this error even if i log on as adminstrator of A/D domain & try to access resource in NT 4 domain.

 

[vbrocks]

I don't think the SIDS are migrateable because they have info about the domain they are from.....
You cannot migrate the users as they have their own sids as well. I think you should create NT accounts for them in the NT domain, with the correct permissions. Is it proper to be in native mode in the same forest with the NT domain? I thought that you had to be in mixed mode?