Home All Groups Group Topic Archive Search About

Assigning roles to users from trusted domains

Author
16 Dec 2008 12:36 AM
Saqib Ali
I am trying to use the AzMan.msc to assign Roles to users/groups from
a trusted domain. But it is not working. There are no error messages.
I can add users from the current domain but not from the trusted
domains.

What gives?

saqib
http://doctrina.wordpress.com/

Author
16 Dec 2008 8:41 AM
Rajesh J S
Hi

I have done this one...
Its posibel. In my environment its working.
What error you are getting can you update me..!!


Rajesh JS
MCP,MCSA


Show quoteHide quote
"Saqib Ali" wrote:

> I am trying to use the AzMan.msc to assign Roles to users/groups from
> a trusted domain. But it is not working. There are no error messages.
> I can add users from the current domain but not from the trusted
> domains.
>
> What gives?
>
> saqib
> http://doctrina.wordpress.com/
>
Author
16 Dec 2008 9:21 PM
Saqib Ali
On Dec 16, 12:41 am, Rajesh J S <Rajes***@discussions.microsoft.com>
wrote:
> What error you are getting can you update me..!!

That is the thing, it doesn't give any error msg. Just doesn't add the
users from other trusted domains.......

saqib
http://doctrina.wordpress.com/
Author
16 Dec 2008 9:34 AM
Jorge Silva
Hi
Can you do it using dsa.msc?

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.
Show quoteHide quote
"Saqib Ali" <docbook.***@gmail.com> wrote in message
news:3875bae7-ae23-4723-8bf6-5ebb9fc67f3c@q30g2000prq.googlegroups.com...
>I am trying to use the AzMan.msc to assign Roles to users/groups from
> a trusted domain. But it is not working. There are no error messages.
> I can add users from the current domain but not from the trusted
> domains.
>
> What gives?
>
> saqib
> http://doctrina.wordpress.com/
Author
16 Dec 2008 9:20 PM
Saqib Ali
On Dec 16, 1:34 am, "Jorge Silva" <jorgesilva***@hotmail.com> wrote:
> Can you do it using dsa.msc?

Jorge,

I am not sure how to manage roles using dsa.msc. Can you please
elaborate.

Thanks
saqib
http://doctrina.wordpress.com/
Author
16 Dec 2008 11:24 PM
Jorge Silva
For example go to that server and using dsa.msc check if you can assign
permissions to a resource to users from tthe trusted domain. I'm thinking
about DNS problems or FW issues.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.
"Saqib Ali" <docbook.***@gmail.com> wrote in message
news:61c5785e-8d7d-4d5d-81b8-24f09f7674f4@e1g2000pra.googlegroups.com...
On Dec 16, 1:34 am, "Jorge Silva" <jorgesilva***@hotmail.com> wrote:
> Can you do it using dsa.msc?

Jorge,

I am not sure how to manage roles using dsa.msc. Can you please
elaborate.

Thanks
saqib
http://doctrina.wordpress.com/
Author
17 Dec 2008 5:54 AM
Saqib Ali
On Dec 16, 3:24 pm, "Jorge Silva" <jorgesilva***@hotmail.com> wrote:
> For example go to that server and using dsa.msc check if you can assign
> permissions to a resource to users from tthe trusted domain. I'm thinking
> about DNS problems or FW issues.

Yup I can add users to group from other trusted domains without any
issues.

saqib
http://www.facebook.com/profile.php?id=792385601
Author
17 Dec 2008 10:30 AM
Jorge Silva
Hum...
-Can you confirm that is possible to do that using trusted domains?
-I found a KB that states a similar problem
http://support.microsoft.com/kb/906381 but within the same domain, you may
want to have a look.
-Also install a network sniffer on that machine and check if the machine is
trying to reach somewere that isn't allowed.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.
"Saqib Ali" <docbook.***@gmail.com> wrote in message
news:62ab208f-bc22-445a-935f-c94f299b3a55@x14g2000yqk.googlegroups.com...
On Dec 16, 3:24 pm, "Jorge Silva" <jorgesilva***@hotmail.com> wrote:
> For example go to that server and using dsa.msc check if you can assign
> permissions to a resource to users from tthe trusted domain. I'm thinking
> about DNS problems or FW issues.

Yup I can add users to group from other trusted domains without any
issues.

saqib
http://www.facebook.com/profile.php?id=792385601
Author
18 Dec 2008 6:16 PM
Saqib Ali
It seems the issue may be related to the following KB:
http://support.microsoft.com/kb/943875

Has anyone installed this hotfix?

saqib
http://www.facebook.com/profile.php?id=792385601
Author
18 Dec 2008 8:16 PM
Jorge Silva
Yep, that is more close to the problem that you're having.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.
Show quoteHide quote
"Saqib Ali" <docbook.***@gmail.com> wrote in message
news:f809c7eb-58dc-43c0-adb3-6fe89777cee6@w35g2000yqm.googlegroups.com...
> It seems the issue may be related to the following KB:
> http://support.microsoft.com/kb/943875
>
> Has anyone installed this hotfix?
>
> saqib
> http://www.facebook.com/profile.php?id=792385601