DNS

[Jasmine]

Hi, I want to make sure my DNS configuration is correct.
As I have two domain one is root domain another is
subdomain. Both DNS setting is by default when I install
AD on each Domain. I have tested it after AD started that
I can ping each Domain controller by FSQN.

however, I found that I can't access the resource on each
domain. eg when i try to connect a share drive on
subdomain, it will said i don't have right to access.

Could anybody help ?
Thanks!

 

[Katherine Coombs]

Jasmine,

The access rights are the most prescriptive of the share permissions and the
NTFS permissions. Make sure that you're trying to access the resources
using the credentials of a user account that has the required permissions.
Also check that the account (and all groups that the account is a member of)
isn't denied any rights.

HTH,
Katherine

 

[Guest]

Jasmine and Katherine

What is the actual question? The DNS configuration or the
access issues?
If 'access' then:

i.Explicitly assigned DENY overrides any other set
permission.


ii.Substitute the word: "prescriptive" in the answer
with: "restrictive".

A successful FQDN (.and not FSQN) resolution to IP
address DOES NOT result in a successful resource access
(SMB)
What Domain/Forest Functional Level is set?
What Client OS is used to do the connection with?

i.Depending on this, SMB Signing & Secure Channel Signing
can come into play.