Forum Discussion

charlie4872's avatar
charlie4872
Brass Contributor
Jan 20, 2022
Solved

Connecting to computer in Different AD forest

Hello I have a issue with computers in AD Forest A connecting to any computer in Forest B when using UNC path \\FORESTBCOMPUTER\SHARENAME. It seems to only work when I use FQDN \\FORESTBCOMPUTER.FORE...
  • Harm_Veenstra's avatar
    Jan 22, 2022
    If you have multiple dns suffixes configured on a forest A computer, than it should try resolving the name of forest B computer first on the primary suffix and if that fails it should try the secondary suffix. Can you confirm that you can ping forestbcomputer without using FQDN?

    Could have someting to do with :
    • Domain Member: Digitally sign client communication (when possible)
    • Microsoft network client: Digitally sign communications (always)

    Are the policies in both domains the same regarding SMB signing? https://techcommunity.microsoft.com/t5/storage-at-microsoft/configure-smb-signing-with-confidence/ba-p/2418102

Resources