Recommended methods to permit account lookups and interactive logons across forests (816467)
The information in this article applies to:
- Microsoft Windows Server 2003, 64-Bit Datacenter Edition
- Microsoft Windows Server 2003, 64-Bit Enterprise Edition
- Microsoft Windows Server 2003, Datacenter Edition
- Microsoft Windows Server 2003, Enterprise Edition
- Microsoft Windows Server 2003, Standard Edition
- Microsoft Windows XP Professional
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Advanced Server
SUMMARYWhen you implement a forest trust between your Windows
Server 2003 forests instead of using an external trust as you might have in
earlier versions of Windows, user authentication for access to resources and
for the assignment of permissions is performed differently. This article
describes the methods that you can use to make sure that the cross-forest
authentication is successful.To permit cross-forest interactive logonsTo log on to a domain in another forest:Windows 2000Log on by entering your credentials in the UPN format. For
example,
user@domain.com.Windows XPLog on by entering your credentials in the UPN
format. For example,
user@domain.com.
To permit using the UNC format when you enter your
credentials,
install Windows XP SP2. The UNC format is Domain\User.To permit cross-forest account lookup operations from Microsoft SharePoint Portal Server 2001To permit cross-forest account queries from a SharePoint Portal
Server 2001 server that is running on Windows 2000 Server, update Windows 2000 Server to
Service Pack 4 (SP4) or update SharePoint Portal Server 2001 to SharePoint
Portal Server 2001 Service Pack 3 (SP3).
Modification Type: | Minor | Last Reviewed: | 10/13/2004 |
---|
Keywords: | kbinfo KB816467 |
---|
|