PeterCS
Wed Aug 13 18:51:34 PDT 2008
On Aug 12, 11:00=A0pm, "Ace Fekay [MVP Direcrtory Services]"
<firstnamelastn...@hotmail.com> wrote:
> "PeterCS" <pcsu...@gmail.com> wrote in message
>
> news:d7991c83-4117-45a9-8dda-65311eebb24f@2g2000hsn.googlegroups.com...
>
>
>
> >I am currently trying to fix an issue with my companies AD structure.
> > I have had this issue but I cannot find my answer on the internet yet
> > so I will post here with hope that the community can help me out.
>
> > Currently I have AD structure similar to the drawing below.
>
> > <rootdomain.int>
> > =A0 =A0 =A0 =A0 =A0 |
> > =A0 =A0 =A0 =A0 =A0 |
> > =A0<domain.int>
>
> > rootdomain.int has only a few DC's and 4 real users, just a empty root
> > domain
> > domain.int is where all the servers, groups, users and etc are.
>
> > When on a member server from the "domain.int" domain I cannot access
> > the rootdomain.int domain. I get access denied no matter what I do. I
> > know the user accounts I am using (from both domains) have access as I
> > can login to the DC's at the rootdomain.int with them. Plus they are
> > Domain Administrators or something comparable.
>
> > Anyone have any ideas? I seem to remember something about
> > authentication and a GPO but I cannot put my finger on it yet.
>
> > Peter
>
> Is domain.int a child domain? If so, it should be in the form of
> domain.rootdomain.int.
>
> If not a child, is it another tree in the forest?
>
> If a true parent-child, this issue maybe a DNS resolution issue. How is D=
NS
> setup? Is it a delegation? Can you post an unedited "ipconfig /all" from =
a
> DC in rootdomain.int and from domain.int please? This is important to hel=
p
> us to understand your infrastructure, name resolution, and DNS setup to
> better assist you.
>
> --
> Regards,
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
> MVP Microsoft MVP - Directory Services
> Microsoft Certified Trainer
>
> For urgent issues, you may want to contact Microsoft PSS directly. Please
> check
http://support.microsoft.comfor regional support phone numbers.
>
> Infinite Diversities in Infinite Combinations
No they are in the same forest as a child / parent. As a side note I
did figure it out. It looks like it was a group policy applying to the
server / OU. After I changed OU's I had no more issues.