C
Chris Friedline
Hello,
I have a testdomain with a one-way, external trust to our production domains
(prod accounts can log into test, but not the other way around). However,
when I browse a group for members using Users and Computers from a computer
in the production domain, I get a message saying: "A global catalog cannot
be contacted to retrieve the icons for the member list because access was
denied. Some icons may not be shown." I also get error messages when
trying to create accounts from a computer in the prod domain saying that the
account cannot be verified as unique b/c of GC, etc, etc. The account I'm
using in prod is a member of builtin\administrators in the test domain.
Can anyone point me to what permissions to change on the test domain GC
servers? These problems do not happen when logged into the domain (on a dc,
member server, etc) - only cross domain.
Thanks,
Chris
I have a testdomain with a one-way, external trust to our production domains
(prod accounts can log into test, but not the other way around). However,
when I browse a group for members using Users and Computers from a computer
in the production domain, I get a message saying: "A global catalog cannot
be contacted to retrieve the icons for the member list because access was
denied. Some icons may not be shown." I also get error messages when
trying to create accounts from a computer in the prod domain saying that the
account cannot be verified as unique b/c of GC, etc, etc. The account I'm
using in prod is a member of builtin\administrators in the test domain.
Can anyone point me to what permissions to change on the test domain GC
servers? These problems do not happen when logged into the domain (on a dc,
member server, etc) - only cross domain.
Thanks,
Chris