Trust win 2000 AD and NT4

[Colemont Bert]

Hi all,

We have here a native win 2000 domain, and a trust link with an NT4 domain.
The admin's at the NT4 can view our users, but whe can't vieuw there users.
Any suggestions?

 

[Wizzle]

The Domain have to be in Mixed mode inorder for that to happen. You can't
revert back to Mixed when you are in Native

Wezo.

 

[Colemont Bert]

and is there also no workaround or something that can be done? (just
checking if there is really no solution)
otherwise we shall install a second domain that is mixed, and make an NT
trust and a trust to the win2k domain,...

 

[David Brandt [MSFT]]

You should be able to do the trust/s with that domain in native mode.
Sounds like you've got it working one direction ok, but are you sure that
the trusts are set up and working both ways (ie, you can logon to a machine
in the 2k domain and see an option to logon to the nt4 domain, or verify
them in domains/trusts). Be sure that the trusts were set up between the
pdc/s of both domains, and that All of the win2k dc/s are able to resolve
the nt4 pdc, not just the 2k pdc.
Also important is what error/s or pop up messages you see, if any, when you
try to view the users in the other domain. Is the other domain even an
available option to select in the "view" drop down.

--
David Brandt
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

 

[Colemont Bert]

Ok, I cannot see the domains on the drop down list, and also the NT domain
has no DNS but only WINS. The current trust is set up in both ways, but not
able to verify, cause it cannot contact the DC. All DC's of the win2k domain
are able to resolve the pdc of the NT domain, because there is a host in the
DNS created wich points to the PDC and the WINS.

 

[David Brandt [MSFT]]

When you see the other domain/s available for logon too, or in lists
available to add users from, then the trusts are working, but until then
they are not, and it appears that this one is half way home. You'll need to
add an lmhosts file on the nt4 pdc pointing to the pdc emulator in 2k domain
to verify the 1B.
Use the following and be sure to run nbtstat and see the output shown in the
article to know that it is properly in cache. Be sure that there are
Exactly 20 spaces between the " " marks and no extension on the lmhosts file
name.
180094 How to Write an LMHOSTS File for Domain Validation and Other Name
http://support.microsoft.com/?id=180094

--
David Brandt
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

 

[news.pi.be]

Ok, thanks david!!! Think the problem is resolved now,... will monitor it
for another few days, and keep u notified!

 

[Cary Shultz [A.D. MVP]]

Colemont,

Is the trust in both directions? I might take a look at the following MSKB
Article:
http://support.microsoft.com/default.aspx?scid=kb;en-us;228477

HTH,

Cary