Need to trust two different forrests?

[Leythos]

I have two forests locA.company.com and locB.company.lan and need to
setup a trust between them so that users can access select files/folders
between the file servers in each domain.

I configured DNS and trusts between then - I can see the reverse DNS
information populate and update in each forest....

I can add users from locA to local groups in locB, but when a locA user
tries to use a locB file/share they get an error about permissions...

Any pointers - I would love to read up on trusts between forests.

Thanks

 

[Johan Arwidmark]

You can check these articles

HOW TO: Set up a One-Way Non-Transitive Trust in Windows 2000
http://support.microsoft.com/?id=309682

Best Practice Active Directory Design for Managing Windows Networks
http://www.microsoft.com/technet/tr.../prodtechnol/ad/windows2000/plan/bpaddsgn.asp

regards
Johan Arwidmark

Windows User Group - Nordic
http://www.wug-nordic.net

 

[Leythos]

You can check these articles

HOW TO: Set up a One-Way Non-Transitive Trust in Windows 2000
http://support.microsoft.com/?id=309682

The locA is a windows 2003 server setup and the locB is a 2000 server
setup, both are in native mode and have secondary DNS to each other. I
can MANAGE Domain (select it) for either from either, but I can not get
the shares to work with local groups adding the other domains groups.

I did exactly as stated in the above MS article - maybe they setup DNS
wrong at locB?

Thanks.

 

[Leythos]

The locA is a windows 2003 server setup and the locB is a 2000 server
setup, both are in native mode and have secondary DNS to each other. I
can MANAGE Domain (select it) for either from either, but I can not get
the shares to work with local groups adding the other domains groups.

I did exactly as stated in the above MS article - maybe they setup DNS
wrong at locB?

Actually, it was a DNS problem - the other end was not correctly mapping
back to my end, and the names were not resolving properly. IP worked.

Now that DNS is setup properly I can connect to shares by name
\\server.location.company.lan\sharename without any problems.