Cannot access server in different domain

[chadavox]

Hi,

Previously, I have 2 domain : domain A (Windows Server 2003)and domain B (windows NT).

I could use a computer in domain A to access a 'shared folder' in a computer in domain B, by logging in using the domain B id and password.
( A box would pop out asking for the id and password)

Now, my PDC of domain B is down, and I setup a new PDC (windows NT) for it. All the existing desktop under domain B can access each other's shared folders.

The problem is, when I try to access a shared folder in domain B, from a desktop in domain A, it fails. It pop out a box asking me to enter the id and password which I did (using the domain B id and password, just like before) but it fails to authorize it. It keeps on popping the box for id and password.

Could anyone let me know what's went wrong ? How I can fix it, back to the situation just like before ?

Thank you.

 

[rasczak]

when you set up the new PDC, was it a clean install? if so, your going to need to setup trust between the two domains, as well as any group permissions you had previously. all of this occurred because your user and group sids are completely different now.

 

[chadavox]

when you set up the new PDC, was it a clean install? if so, your going to need to setup trust between the two domains, as well as any group permissions you had previously. all of this occurred because your user and group sids are completely different now.

Thank you rasczak for your reply.
Yes, it is a clean install.
How do I setup a trust between the 2 domains ?
I am not expert in this.

Thank you

 

[seepy83]

You would use the Active Directory Domains and Trusts mmc snap-in. Please read the Microsoft documentation about Trusts before you start making changes. This is not something that should be done on the fly by someone who doesn't even know what tool to use to set it up.

 

[rasczak]

Thank you rasczak for your reply.
Yes, it is a clean install.
How do I setup a trust between the 2 domains ?
I am not expert in this.

Thank you

http://support.microsoft.com/kb/889030

as you stated, since you are not an expert, if you do not feel confident going through this, then it would be a wise decision to bring a consultant on board, especially if this setup is critical to business operations.

 

[Emulex]

google how to setup a trust. it's not that hard and you won't do alot of damage if you setup a one-way trust.

Alot of folks do one-way trust for old NT domain to new AD services.

alot of great articles but read read read before you do. AD is not something you restore from tape lol.

 

[rasczak]

google how to setup a trust. it's not that hard and you won't do alot of damage if you setup a one-way trust.

Alot of folks do one-way trust for old NT domain to new AD services.

alot of great articles but read read read before you do. AD is not something you restore from tape lol.

you got that right. lol!

 

[Thor86]

You can always backup the system state prior to running any changes in AD.