Receiving "Access Denied, Unable to Connect"...

[Blair]

We have two Windows 2000 domains(A & B) that are trusted each way.
Users from one domain(A) login to a Terminal Server on another domain(B)
with ID's created from domain B(It's just earsier this way, considering
the application config). These user id's are members of a global
security group, that has rights to print queues residing in domain A. So
in their TS session, they are attaching to printers that they would
normally use in their local environment. Anyway, all of the printers
that have been defined for them, now have a status of: "Opening", or
"Access denied, Unable to Connect", or just "Unable to Connect". I'm
thinking that there is perhaps a trust issue. Users on domain B can
connect to shares created on domian A, but it seems when we try to do
the opposite, it says that domain controllers or server are not
available. I'm not sure what could have happened, but it looks as
thought one direction of the trust has been compromised. Any thoughts
would be greeeaaat!

Thanks,
Blair

 

[Wolf Kirchmeir]

On Fri, 16 Jan 2004 08:26:38 -0500, Blair wrote:

=>We have two Windows 2000 domains(A & B) that are trusted each way.
=>Users from one domain(A) login to a Terminal Server on another domain(B)
=>with ID's created from domain B(It's just earsier this way, considering
=>the application config)....snip...

I think you will get much better help from a network
newsgroup, as this seems to be strictly a network issue.

HTH&GL

 

[Alan Morris\(MSFT\)]

This is the SERVER getting access denied talking to the spooler on the
client.

Make sure the Print Server has access to the clients (in this case your TS
server). I have seen trusts problem cause this, but I just want make sure
you know that this is the server that is getting access denied.

If you have rolled out some additional security on the clients you can see
this.
needs to be set to 1 for server to see the client
http://support.microsoft.com/default.aspx?scid=kb;en-us;246261
How to Use the RestrictAnonymous Registry Value in Windows 2000

--
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto

This posting is provided "AS IS" with no warranties, and confers no rights.