DNS across domains

G

Guest

I believe this is a DNS problem but not sure ....

I have Domain A and Domain B, Domain B is an external one-way trust, in that
Users in A have access to resources in B. When I add a user from A to a
resource in B, I can browse the AD users and computers to add the
permissions. When I close all dialog boxes, check the permissions all I get
is a SID number.

Domain B is not resolving the user names.

thanks
 
A

Ace Fekay [MVP]

In
RThibault said:
I believe this is a DNS problem but not sure ....

I have Domain A and Domain B, Domain B is an external one-way trust,
in that Users in A have access to resources in B. When I add a user
from A to a resource in B, I can browse the AD users and computers to
add the permissions. When I close all dialog boxes, check the
permissions all I get is a SID number.

Domain B is not resolving the user names.

thanks

That would be an NTLM issue, which is based on NetBIOS, not DNS. Is NetBIOS
name resolution supported between the locations of the two domains? WINS
would be the answer here.

--
Regards,
Ace

If this post is viewed at a non-Microsoft community website, and you were to
respond to it through that community's website, I may not see your reply.
Therefore, please direct all replies ONLY to the Microsoft public newsgroup
this thread originated in so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services
Infinite Diversities in Infinite Combinations.
=================================
 
G

Guest

Ace Fekay said:
In

That would be an NTLM issue, which is based on NetBIOS, not DNS. Is NetBIOS
name resolution supported between the locations of the two domains? WINS
would be the answer here.

--
Regards,
Ace

If this post is viewed at a non-Microsoft community website, and you were to
respond to it through that community's website, I may not see your reply.
Therefore, please direct all replies ONLY to the Microsoft public newsgroup
this thread originated in so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services
Infinite Diversities in Infinite Combinations.
=================================


yes WINS is enabled on both domains ... thanks
 
A

Ace Fekay [MVP]

In
RThibault said:
Yes WINS servers are configured as replication partners ... thanks
for your help


If the problem is that it just comes down to the ACL just showing the SID
numbers and takes forever to resolve the associated user/group account, it
can come down to how busy the DCs are and/or WAN links. Since I am not aware
of your network configuration and topology, I would be guessing at this
point. I've seen overloaded DCs and/or WAN links cause this same thing.
Otherwise, if the user/group still has access to the resource, I wouldn't
worry too much.

Ace
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top