I have a single user who is logged in with a domain account on a domain that I don't maintain. On that domain they are able to see all local resources but not on my domain. I have made sure on my domain controller that the users account is part of the domain admin group, have forced a policy update to all of the machines in my domain and even added his PC as part of my domain. I have also verified that network discovery is turned on, IPV6 is disabled and that all security measures are turned off on his side. I can ping him from my domain by both his machine name and by IP but he is still unable to log in to certain machines on my domain. Does any one have any clue as to why this would be? Thank you Doug

Hi Doug, your question states "unable to SEE", but I read in your comments that that particular remote account cannot access/authenticate to some machines in your domain. You also stated that that remote account is in the Domain Admins group of your domain, which means there is a trust in-place. What kind of trust is that and how complex is the infrastructure? Meaning are there many subnets in place and firewalls that might block that client machine access to the remote domain DC's to verify the credentials. This would be the case if the domain trust is a simple NTLM trust and not a Forest Trust where authentication and authorisation would be based on Kerberos tickets. Also if you have a so-called restrictive trust, each system that needs to be accessed via the trust must have the "allow to authenticate" set on the object's security settings TAB. basically saying that your problem could be caused by a number of reasons variying from nameresolution, firewalls, etc. You might want to install Wireshark or MS Network Monitor on both sides and sniff the traffic or something like TCPVIEW to see if the client tries to access a resource but the status remains SYN SENT or something like that. Hope this helps.Best regards and many thanks in advance, Eric Vegter