DNS across domains

[Guest]

I believe this is a DNS problem but not sure ....

I have Domain A and Domain B, Domain B is an external one-way trust, in that
Users in A have access to resources in B. When I add a user from A to a
resource in B, I can browse the AD users and computers to add the
permissions. When I close all dialog boxes, check the permissions all I get
is a SID number.

Domain B is not resolving the user names.

thanks

 

[Ace Fekay [MVP]]

In

I believe this is a DNS problem but not sure ....

I have Domain A and Domain B, Domain B is an external one-way trust,
in that Users in A have access to resources in B. When I add a user
from A to a resource in B, I can browse the AD users and computers to
add the permissions. When I close all dialog boxes, check the
permissions all I get is a SID number.

Domain B is not resolving the user names.

thanks

That would be an NTLM issue, which is based on NetBIOS, not DNS. Is NetBIOS
name resolution supported between the locations of the two domains? WINS
would be the answer here.

--
Regards,
Ace

If this post is viewed at a non-Microsoft community website, and you were to
respond to it through that community's website, I may not see your reply.
Therefore, please direct all replies ONLY to the Microsoft public newsgroup
this thread originated in so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services
Infinite Diversities in Infinite Combinations.
=================================

 

[Guest]

In

That would be an NTLM issue, which is based on NetBIOS, not DNS. Is NetBIOS
name resolution supported between the locations of the two domains? WINS
would be the answer here.

--
Regards,
Ace

If this post is viewed at a non-Microsoft community website, and you were to
respond to it through that community's website, I may not see your reply.
Therefore, please direct all replies ONLY to the Microsoft public newsgroup
this thread originated in so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services
Infinite Diversities in Infinite Combinations.
=================================


yes WINS is enabled on both domains ... thanks

 

[Ace Fekay [MVP]]

In

yes WINS is enabled on both domains ... thanks

Are the two WINS servers configured as replication partners?

Ace

 

[Guest]

Yes WINS servers are configured as replication partners ... thanks for your
help

 

[Ace Fekay [MVP]]

In

Yes WINS servers are configured as replication partners ... thanks
for your help

If the problem is that it just comes down to the ACL just showing the SID
numbers and takes forever to resolve the associated user/group account, it
can come down to how busy the DCs are and/or WAN links. Since I am not aware
of your network configuration and topology, I would be guessing at this
point. I've seen overloaded DCs and/or WAN links cause this same thing.
Otherwise, if the user/group still has access to the resource, I wouldn't
worry too much.

Ace