Problem with cross domain authentication in W2k3 Active Directive

[popasmuerf]

Hello All,


From what I understand….although a parent and a child domain may have a two way trust by default, the two domains do not have access to each others respective resources by default.

If my goal is to grant users in the root(parent) domain authentication rights no matter where they are in the forest, how would I go about doing that?

A solution that I have tried already, is to add the user groups in the parent domain to the "Domain Local Group" in the child domains.
The only problem is when I tried to execute this idea, I didnet see an option to do the above in Active Directory Domains and Trusts.


Can any one help me with this ?

 

[ITPangaeaArchitect]

you simply need to adjust the default domain policy in the child domain to place a group (such as forestroot/authenticated users) into the access this computer from the network and allow logon locally user rights,,,

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+