Resource Access across Domains

[Guest]

Environment Overview

The Domain is a mixed environment with predominantly NT4
DC's, some Windows 2000 member servers and a Windows 2003
PDC. There are two Domains Australia (BMCL) and New
Caledonia (NEWCALEDONIA), which is a Windows 2000 Domain
running in mixed mode. There are ISA Firewalls installed
in both environments, we are utilising ISA Permanent
VPN's to provide connectivity between the Domains.

The NEWCALEDONIA Domain is using DNS for name resolution
and there is no WINS, the DNS zone is newcaledonia.local.
The BMCL Domain is using WINS and DNS for name
resolution, the DNS zone is bmcl.local. The PDC in each
Domain has a secondary copy of the alternative DNS zone.

A Domain Trust has been established between the BMCL and
NEWCALEDONIA Domains and largely appears to be
functioning correctly however a couple of issues have
been noted.

Issue

Using the logon credentials from a user on the
NEWCALEDONIA Domain I logged onto a PC within the BMCL
Domain. However I encountered an error when trying to
connect a printer from the alternate Domain, I reviewed
the security on the print queue and added the
NEWCALEDONIA\Domain Users with Print permissions onto the
print queue. I then tried again and received the
following error.

You do not have sufficient access to your computer to
connect to the selected printer.

Does anyone have any trouble shooting ideas to help
resolve this issue?

 

[Ovidiu Popa]

My advice: hire a consultant to analyse your domains structure and trust
relationships. Such problems are almost impossible to debug via newsgroup
messages.

Ovidiu Popa
MVP