unknow user name or password

[Gary]

Hi all,

recently we have a problem to connect to other branch offices.
We have three offices which are under the same forest root domain.
(hk.ABC.com, cn.ABC.com and us.ABC.com) ABC.com is our root forest domain.
last week we found that when we try to connect to other site file servers, a
user login screen appear. It asking us the user name and password. (before
is no need and
all the user within the domain have the access right to access the servers).
Also, when user from Hk to Cn office and tried to use the printer (users are
using laptop computer
and they have all the office's printer setup with root domain). They got a
error message "you don't
have the permission to print to the printer" but all the printers they have
the access right.
Everytime, we needed to re-map the printer for them but after reboot, they
got the error message again.

Thanks,
Gary.

 

[Cary Shultz [A.D. MVP]]

Gary,

I am not sure that I understand your question.

If you have a user who is in one domain ( say, hk.abc.com ) and goes to
another domain the fact that there is a trust between all the domains simply
makes possible the availability of resources in the other domains to this
user. If the users in hk.abc.com do not have the Share and NTFS permissions
to resources in, say, ca.abc.com then they will not be allowed access. They
will have to provide some sort of credentials.

If you were to set things up so that users in hk.abc.com were members of a
group ( say, hongkongusers ) and this group were added to both the Share and
NTFS permissions to resources in the ca.abc.com domain then when a user from
hk.abc.com went to the ca.abc.com domain he/she would not have a
problem....provided he/she is attempting to access resources to which the
group hongkongusers was given permissions.

I hope that I understood your question correctly.

Cary

 

[Chriss3 [MVP]]

Hello Gray,

Verify the trusts between the domains in your forest from Active Directory
Domain and Trusts. Turn on Auditing and monitoring the security logs

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup