W2K - W2K3 Trust

We have just established a trust between a Windows 2000 Server Domain and our
Windows 2003 Domain. The Windows 2000 Domain is in Native mode and the
Windows 2003 Domain is in Windows 2000 native mode also. The W2K3 has a root
domain above the domain that we have created the trust in, the forest is in
Windows 2000 mode also.

The trust has created fine and will verify on both ends both incoming and
outgoing. Machines ( servers and workstations ) from the W2K3 side are able
to browse the W2K domain when setting perms on objects. The Windows 2000
domain will not allow you to browse objects and fails with the following
error.


Cannot display objects from this location because of the following error:

The Login attempt failed.

???

I can ping across the trust from both directions and that seems to work fine?

HELP !
--
Who knows secret Ninja Moves from the Goverment.....

No One has any ideas?
--
Who knows secret Ninja Moves from the Goverment.....


"P-Ditty" wrote:

> We have just established a trust between a Windows 2000 Server Domain and our
> Windows 2003 Domain. The Windows 2000 Domain is in Native mode and the
> Windows 2003 Domain is in Windows 2000 native mode also. The W2K3 has a root
> domain above the domain that we have created the trust in, the forest is in
> Windows 2000 mode also.
>
> The trust has created fine and will verify on both ends both incoming and
> outgoing. Machines ( servers and workstations ) from the W2K3 side are able
> to browse the W2K domain when setting perms on objects. The Windows 2000
> domain will not allow you to browse objects and fails with the following
> error.
>
>
> Cannot display objects from this location because of the following error:
>
> The Login attempt failed.
>
> ???
>
> I can ping across the trust from both directions and that seems to work fine?
>
> HELP !
> --
> Who knows secret Ninja Moves from the Goverment.....

Sounds like SMB-signing is getting in the way of the browser operation.

How to Shoot Yourself in the Foot with Security, Part 1
http://www.microsoft.com/technet/com...mt/sm0905.mspx

Security settings that can cause a problem with downlevel client access:
http://support.microsoft.com/default...5BLN%5D;811497
http://support.microsoft.com/default...b;en-us;823659

--
Todd J Heron, MVP Windows Server - Networking
MCSE - Windows Server 2003/2000/NT;