Migration and Rights

[ilene]

I am in the process of setting up a paralled domain to my
current domain for migration. I have a hollowroot
followed by 2 domains in the forest. All have trusts
between them. So the form is as follows, 1 forest, 3
domains (hollowroot.local, domain1.local, domain2.local).
I've already established the trust relationship between
the hollowroot.local and the NT domain and the
domain1.local and the NT domain. I have migrated some
users accounts including my own (I'm a domain admin in
both domains (NT and 2000) and an enterprise admin in AD.
I can get to any share on my NT domain however I can not
get to my mail and I can't use the administrative share
either. I thought that because I have the trusts
established and I have "exchanged" administrator accounts
that I wouldn't have this problem. Can anyone explain????

 

[Ivan Sheng]

Hi ilene,

Domain A: NT domain
Domain B: hollowroot.local/ domain1.local

To have a more concrete image on this issue, I'd like to know:

1. How do you receive email in domain A from domain B? Do you create a new
Outlook profile? How do you create the Outlook Profile?

2. Does the domain B account you used to access computer "administrative
share" in domain A is in that computer's local Administrator group? That's
is to say, is the account <DomainBname>/<Username> is in the domain A
computer local Administrator group?

I look forward to hearing from you.

Ivan Sheng
Microsoft Online Partner Support
MCSD,MCSE4,2000,MCDBA,CCNA,ASE
Get Secure! ¨C www.microsoft.com/security

This posting is provided ¡°as is¡± with no warranties and confers no rights.

 

[ilene]

Thanks for your reply...

I actually have 3 domains for 2000 and 1 NT domain. The 3
domains are hollowroot.local, domain1.local and
domain2.local. The NT domain is the active domain where
I'm migrating from. The NT domain also have linux dns
servers too.

So far I'm trying to migrate the users only and "swap"
permissions between domains. I have actually done some of
that so far. I can not get mail in the 2000 domain yet
because it tells me there are no permissions. The mail
server is a stand alone 2000 box in the NT domain.

I'm also experiencing Nslookup issues because it doesn't
seem to be able to resolve things, but I'm not sure if
that's due to the linux dns servers not having the dns of
the DC's I've created. I'm sure DNS is related to this
too. When I type nslookup for any of my DC's
Can't find server name for address, it gives the ip
address and then says non-existent domain.

I have my domain1.local's primary dns pointing to the
hollowroot and the secondary dns pointing to
domain2.local. Domain2.local is point to the hollowroot
and the secondary dns is pointing to domain1.local.
Finally, the hollowroot is pointing to domain1.local and
itself.

I also have connectivity between the domains too. In
addition I've set up the name servers in DNS too. I have
forwarders enabled in the hollow root and domain1.local
for the Linux boxes but no entries in Linux dens for the
2000 domain.

I think this problem is related to DNS but I'm stumped as
to why, I've run this exact seniaro in a test environment
with none of these problems. If you can "shed" any light
on this I'd be most appreciative.

Thanks.

 

[Ilene]

I was able to solve this. Thanks for your input.

-----Original Message-----
Thanks for your reply...

I actually have 3 domains for 2000 and 1 NT domain. The

3