none
Domain have via "External Two way trust" only access to shared folders on Domain controller of other Domains RRS feed

  • Question

  • Within our organization, four different Domains (A, B, D, D) are connected through External Two-way trust.
    All four Domains have access to a shared folder (everyone read) on Memberserver in Domain A
    Conditional Forwarders has been created on all domains in the DNS.
    Two way trusts between the Domains have been created without problems.
    Pinging from Domains (A, B, C, D) to a server from another domain is also without problems.
    Tool PortQryUI gives the same results on all four Domains.
    For Domains (A, B, C), shared folders in another domains on both Domain controllers and Member servers are accessible without problems also on Domain D, without having to enter crendentials.

    Problem:
    Domain D appears to only have access to shared folders on Domain controllers from Domains (A, B, C) without pop-up, shared folders on Member servers of this Domains gives a pop-up request to enter credentials.

    External Two way recreated, validated, Servers restart, etc, unfortunately did not help.

    We are using VMware 6.5, Windows 2016 servers.

    Does anyone have an idea?




    Friday, October 18, 2019 11:20 AM

All replies

  • Hi,

    Thanks for posting in our forum.

    Problem:

    Domain D appears to only have access to shared folders on Domain controllers from Domains (A, B, C) without pop-up, shared folders on Member servers of this Domains gives a pop-up request to enter credentials.

    May I know whether user can access the shared folder once they entered their credential and password?

    In addition, have you verified the NTFS permission and share permission on file server?

    Best Regards,

    William


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    Monday, October 21, 2019 7:56 AM
    Moderator
  • Hi,

     

    Just want to confirm the current situations.

     

    Please feel free to let us know if you need further assistance.

     

    Best Regards,

    William

     


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, October 25, 2019 8:47 AM
    Moderator
  • Hi,

    Thank you for your response.

    When entering credential and password, it gives "the specified network password is not correct" tested with multiple accounts.


    Below the permissions of Shared folder on Memberserver (Domain A)

    Share permissions: Everyone
    NTFS permissions: Users (Memberserver\Users)      > Domain A\Domain users

    All Domains can access this share except Domain D

    When manually add "Domain users" group from domain D to "Shared permissions" Memberserver (Domain A) and wait for a couple of minutes and look again to shared permission group is renamed to None >  (Memberserver\None) !!!
    When i manually add "Domain users" group of domain D to "NTFS permissions" Member server (Domain A) and wait for a couple of minutes it stay correct.

    Do you have an idea?
    Monday, October 28, 2019 8:36 AM
  • Hi,

    >>wait for a couple of minutes and look again to shared permission group is renamed to None >  (Memberserver\None) !!!

    Would you mind provide a screenshot and hidden your privacy information? I never encounter this scenario before.

    >>When i manually add "Domain users" group of domain D to "NTFS permissions" Member server (Domain A) and wait for a couple of minutes it stay correct.

    After performed this operation, does users from domain D can access the shared folder?

    Best Regards,

    William


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, October 28, 2019 8:45 AM
    Moderator
  • Would you mind provide a screenshot and hidden your privacy information? I never encounter this scenario before.

    After performed this operation, does users from domain D can access the shared folder?

    Unfortunately it doesn't work for Domain D


    Monday, October 28, 2019 12:21 PM