Connecting to a dfs root with a workstation from a different domain

picture 2 company's ; company a , company b. company b uses dfs(w2003). a laptop user company connect dfs company b when he's working @ company b. logs on laptop company a credentials. tries create connection the dfs root company b credentials gets acces denied. however, when connects directly server folder resides, can connect , gets acces. can explain me??
thanks in advance.

hello enkidoe,

domain based namespace dfs different standalone dfs. in case, dealing domain based dfs such companyb.com\data. domain based dfs, must logon , authenticate domain to able access dfs using \\domain.com\share etc, without may have use \\servername\share and enter necessary credentials.  you have keep in mind that, company notebook nbca member of companya.com domain , not visiting companyb.com domain. when user goes comapnyb , logon using companya cache credentials, not authenticating domain controller (you can verify typing set logonserver @ command prompt, , see user logon local machine). in case neither logon/authenticating either companya or companyb eventhough in companyb's network.

if there is/was exisiting trust relationship between 2 domains, while in companyb, user have logon nbca laptop authenticating local domain controller , have been able access shares via \\companyb.com\data no isues. , since such trust not exists, option access dfs directly server \\servername\data using give companyb credentials.

in sumary last question, user getting access denied error because domain controllers not recognize nbca.companya.com laptop , domain since there no trust. , companyb\joe not logon companyb domain. security wise access denied.

so eventhough companyb\j.doe account have rights access dfs root, j.doe can access if logon companyb domain. companyb\j.doe can logon local workstation join companyb domain , have no problem access using \companyb.com\data .

i hope explaination helpful,

---

isaac oben mcitp:ea, mcse

Windows Server  >  Directory Services