Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Get prompted for username and password on PC in another forest/domain
Get prompted for username and password on PC in another forest/domain [message #162112] Thu, 15 October 2009 01:54 Go to next message
Gonzo  is currently offline Gonzo  United Kingdom
Messages: 66
Registered: July 2009
Member
Hi,

We have a 2 way trust between our domain and another domain, I have put my
username into their administrators group and I can now go start > run >
\\1.2.3.4\c$ and get sraight onto the servers C drive. This is not the case
for the users PC though, I always get prompted for the username and
password. If I then put in the domain\administrator account it works,
shouldn't my account work which is on the other domain as I'm in the admins
group?
Re: Get prompted for username and password on PC in another forest/domain [message #162113 is a reply to message #162112] Thu, 15 October 2009 02:05 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Gonzo,

Did you make sure that the Builtin\Administrators group is member of the
local admins on the computer? By default the domain administrators group
is added to the local administrators, not the Builtin\administrators group,
where the domain admins are member of.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi,
>
> We have a 2 way trust between our domain and another domain, I have
> put my username into their administrators group and I can now go start
> > run > \\1.2.3.4\c$ and get sraight onto the servers C drive. This
> is not the case for the users PC though, I always get prompted for the
> username and password. If I then put in the domain\administrator
> account it works, shouldn't my account work which is on the other
> domain as I'm in the admins group?
>
Re: Get prompted for username and password on PC in another forest/domain [message #162116 is a reply to message #162112] Thu, 15 October 2009 04:26 Go to previous messageGo to next message
Jorge Silva  is currently offline Jorge Silva  Portugal
Messages: 398
Registered: July 2009
Senior Member
Hi
Instead of using the ipaddress use the fqdn of the machine, ehat happens?

--
I hope that the information above helps you.
Have a Nice day.
Jorge Silva
MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.



"Gonzo" <andrewwhite@btinternet.com> wrote in message
news:#VHdXxWTKHA.1732@TK2MSFTNGP02.phx.gbl...
> Hi,
>
> We have a 2 way trust between our domain and another domain, I have put my
> username into their administrators group and I can now go start > run >
> \\1.2.3.4\c$ and get sraight onto the servers C drive. This is not the
> case for the users PC though, I always get prompted for the username and
> password. If I then put in the domain\administrator account it works,
> shouldn't my account work which is on the other domain as I'm in the
> admins group?
Re: Get prompted for username and password on PC in another forest/domain [message #162119 is a reply to message #162112] Thu, 15 October 2009 05:56 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Gonzo" <andrewwhite@btinternet.com> wrote in message
news:%23VHdXxWTKHA.1732@TK2MSFTNGP02.phx.gbl...
> Hi,
>
> We have a 2 way trust between our domain and another domain, I have put my
> username into their administrators group and I can now go start > run >
> \\1.2.3.4\c$ and get sraight onto the servers C drive. This is not the
> case for the users PC though, I always get prompted for the username and
> password. If I then put in the domain\administrator account it works,
> shouldn't my account work which is on the other domain as I'm in the
> admins group?


Has the user account in domainA been added to a group on domainB that has
been provided permissions to that folder?

Ace
Re: Get prompted for username and password on PC in another forest/domain [message #162121 is a reply to message #162113] Thu, 15 October 2009 07:15 Go to previous messageGo to next message
Gonzo  is currently offline Gonzo  United Kingdom
Messages: 66
Registered: July 2009
Member
Thanks, how can I add my user account (domainA0 to the doamin admins group
in domainB?

I seem to remember some rule to this adding users to groups across domains.


"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911d79248cc1b961a54d5f8@msnews.microsoft.com...
> Hello Gonzo,
>
> Did you make sure that the Builtin\Administrators group is member of the
> local admins on the computer? By default the domain administrators group
> is added to the local administrators, not the Builtin\administrators
> group, where the domain admins are member of.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hi,
>>
>> We have a 2 way trust between our domain and another domain, I have
>> put my username into their administrators group and I can now go start
>> > run > \\1.2.3.4\c$ and get sraight onto the servers C drive. This
>> is not the case for the users PC though, I always get prompted for the
>> username and password. If I then put in the domain\administrator
>> account it works, shouldn't my account work which is on the other
>> domain as I'm in the admins group?
>>
>
>
Re: Get prompted for username and password on PC in another forest/domain [message #162133 is a reply to message #162121] Thu, 15 October 2009 18:18 Go to previous message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Gonzo" <andrewwhite@btinternet.com> wrote in message
news:%238oe2kZTKHA.1232@TK2MSFTNGP05.phx.gbl...
> Thanks, how can I add my user account (domainA0 to the doamin admins group
> in domainB?
>
> I seem to remember some rule to this adding users to groups across
> domains.
>
>

Create and, confirm and verify the trust is in place in both directions. In
ForestA's domain, log in as the EA (Enterprise Administrator, which is the
Domain Administrator in each domain's forest root domain). Go into ADUC,
Built-In container, open Administrators group properties (this is the 'Local
Administrators group of ForestA's root domain), click on Members tab,
browse, change the domain to look into, to ForestB's forest root domain, add
the Domain Administrators group. Do the same for ForestA's root domain Local
Users group adding ForestB's Domain Users group. Then go to ForestB's root
domain, log on as the EA on that domain, and do the reverse.

I hope that helps.

Keep in mind, that on a share, if the Domain Users group has not been
provided access to the share, or it has been changed in the NTFS (Security
tab) permissions, they will be denied and prompted for alternate
credentials.

Ace
Previous Topic:Best Practice Active Directory Structure/Design
Next Topic:Password Expiry
Goto Forum:
  


Current Time: Sat Jan 20 08:30:29 MST 2018

Total time taken to generate the page: 0.04622 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software