none
Existing security group is showing but cannot add new

    Question

  •     I got a tricky situation on forest trust.  We have file share "Share" hosted in asiapac.xyz.com shared to a user abc\AUser in abc.com.  Is in place and working ok.  But when I created a new folder and tried to share the same , I will not able to locate the same account in abc.com. I would expect if the cross forest trust does not work, the existing share "Share" will display SID or some sort if I look at the security settings. But it appear to be normal.

        


    • Edited by herngyih Friday, December 9, 2016 3:49 AM
    Friday, December 9, 2016 3:48 AM

All replies

  • Hi

     First you should verfiy trust health,run "netdom trust <TrustingDomainName> /d:<TrustedDomainName> /verify"

    check the detailed info here ; https://technet.microsoft.com/en-us/library/cc753821%28v=ws.11%29.aspx?f=255&MSPPError=-2147217396

    also check the article for "Troubleshooting a cross-forest trust in Active Directory"

    http://searchwindowsserver.techtarget.com/tip/Troubleshooting-a-cross-forest-trust-in-Active-Directory


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    Friday, December 9, 2016 6:36 AM
  • Hi,

    Are there any updates?

    Did you have checked the health of trust?

    I would expect if the cross forest trust does not work, the existing share "Share" will display SID or some sort if I look at the security settings. But it appear to be normal.

    >>>Did you mean that you saw the SID instead of user name in security?

    If yes, here is an article below for your reference.

    Troubleshooting SID translation failures from the obvious to the not so obvious

    https://blogs.technet.microsoft.com/askds/2011/07/28/troubleshooting-sid-translation-failures-from-the-obvious-to-the-not-so-obvious/

    Best Regards,

    Jay


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, December 12, 2016 8:18 AM
    Moderator