In
Shashank said:
I have a Parent domain controller. I've created a child domain
controller. From child domain I logged off and logged in as Parent
domain- there was access. But, from Parent domain, when I logged off &
logged in as child domain - there was a message "The local policy of
the system does not allow you to log on interactively". Can child
domain log on to parent domain? Pls. reply at the earliest.
If I understand what you are saying, I assume you mean you are trying to log
on to the parent domain using the child domain's Domain Administrator
account, correct?
If not correct, please elaborate.
If my assumption is correct, this is expected and normal behavior. The child
domain's Admin account is the admin account ONLY for the child domain, not
any other domains. The parent domain (assuming you only have two domains),
in your case is the Forest root domain, therefore the admin account of the
forest root is also the EA (Enterprise Admin) which has carte blanche
throughout the forest.
You can add the child domain admin account to the local admin group in the
parent to allow the child domain admin to login.
--
Regards,
Ace
This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.
Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
MVP Microsoft MVP - Directory Services
Microsoft Certified Trainer
For urgent issues, you may want to contact Microsoft PSS directly. Please
check
http://support.microsoft.com for regional support phone numbers.
Infinite Diversities in Infinite Combinations
