Win2000 + NT 4 trust - domain not available?

[Raymond]

Hello,


we have just setup a two-way trust between our (native) Win2k and NT4
domain. Someway somehow it is not the way it should be:

- With User manager for domains I can acces the user database in the AD. I
can add users to resources but when rechecking the permissions it shows a
question mark and Unkown user for that account
- I don't see the NT domain under Entire network | Microsoft Windows network
- When I use the AD user&computer manager and choose Connect to Domain, the
domain is not listed. When I type in the domain name, it gives an error that
the domain is not available
- After creating the trusts I checked an NT4 workstation on the 2000 domain,
at the login prompt the domain pull down menu was showing the new domain...
When I tried to log in... again... domain not available..

We opened up the networks (any - any - accept) completely..
I used nltest, adsi edit and the domains and trusts GUI to check whether the
trust is ok, it looks fine (two way)..

We already modified the LMHOST file on one domain controller... I imported
this lmhost file in the (just installed) wins server on the domain
controller. In the lmhost file we only defined the pdc from the NT4
network...

When I check the Foreign Security principal in the AD I only see the
Pre-Windows 2000 Access object...
When I check the rights of this object on the domain level it has no
rights.. (probably removed after switching to native mode)

Do I need to grant this account rights? Or do I need to take other steps to
'see' the other domain?

Thanks already...

 

[Jimmy Andersson [MVP]]

First, make sure DNS and WINS is working correctly.

Regards,
/Jimmy

 

[Cary Shultz [A.D. MVP]]

Raymond,

In addition to what Jimmy has suggested, I might suggest that you break the
current trusts and try using netdom to create it instead of using the ADDT
MMC. The Support Tools is what you need for netdom to be available to you.

HTH,

Cary