How to connect Win2000 Small Business to Win2003

[Tom]

Hello,

Both servers are located on the same subnet and they can see each other.
Both servers are independent running own Active directories. However, I like
users of Win2000 to be able to access Win2003 server. I tried to to join the
workgroup of Win2000 and then login worked but I want Win2003 to have it's
own Active directory and control over access.
Win2000 for Small Business has disabled trust option so it can not be
trusted server or vice versa it cannot accept trusted servers. Also, Win2000
cannot have sub domains. Because of that I need to created the same accounts
on both servers.
Right now I created an account on Win2003 exactly the same as the one on
Win2003 giving all the rights to access a shared folder. On the level of
folder, server and domain. However, when I try to map the drive to that
shared folder from Win2003 I get the error:
----------------------------------------------------------------------------------------------
The mapped network drive could not be created because the following error
has occurred:
Logon failure: the user has not been granted the requested logon type at
this computer.
---------------------------------------------------------------------------------------------

What else should I do. Or is there other way to have these computers
connected so the users of server Win2000 can easily be authenticated on
server Win2003?

Any help is greatly appreciated,
Tom

 

[Ryan Hanisco]

I am not sure why you posted to the NetWare list, but here goes...

What you are trying to do is exactly what a trust does. And SBS will not
support it. You might consider migrating all of your users to the 2003
server and bringing up full versions of the other SBS components then
killing the SBS domain -- that is about your only option.

Remember, having the username and password the same across both domains
means nothing. The name the domains see is the SID and the associated
Security token generated on logon. Without the trust, this will not
seamlessly go.

You can provide some access, but the users would have to supply username,
password, and domain every time.

I'm sorry I don't have better news.