any suggestions here? I am connecting via vpn to another network.. the vpn seems to work fine, i can ping machines and use remote desktop etc... the problem comes when i try and access a share they have setup for us on their side... i get a username/password box over and over, and no matter what combination i try it fails.. BUT, if i try from a machine which is not in my domain, it works! I thought this may point to a GPO, but i disabled them all and still am having the same problem. The user on the other side says he can use the share, from another domain, so things are pointing to something in my domain in particular... anyone ever see these symptoms or have advice for troubleshooting?? THANKS!!!

When you're connected to the VPN and try and access the shares, are you using a valid userid and password for the other Domain? Life's more painless for the brainless.

yup, i use Domain\user to login and it works fine, as long as i'm not joined to the windows domain here... when i try it here, the username/password box pops back up with MYDOMAIN\username, which i then change to THEIRDOMAIN\username, which still doesnt work... (again, unless im on a non-domain computer).. its driving me nuts :)

Are both domains in the same forest? With Active Directory you can't think in NT terms of Domains. You have to think in AD terms of Forests. If these are two different forests both must be 2003 forests and you will need to create a forest to forest trust [only available in 2003] Imagine the power if you knew how to internet search

You probably have an account with the same username and password on each domain. This could create a problem within Active directory because of different SIDs. Use a different account that only exist within the domain you are logging into.

In response to #3 - they are not in the same forest, they are 2 totally unrelated domains but connected with a vpn.. i understand we can create a domain or forest trust, but is it really necessary to just share a folder?? it seems like providing the credentials should be sufficient.. i dont want to assign my own users rights, this is a new user created in their domain... which leads to #4 - it is a new user created in the other domain only... it does not exist in our active directory - on one machine, i did create a local account with the same username, but that did not help either.. i *think* it might help to create a local user on the other side, instead of using AD - but the server is a domain controller, so that is not an option.. thanks again for your help!!!

You can only create a domain trust between domains in the same forest. You can not create trust between different domains which exist in different forests. AD doesn't just require user credencials but machine credencials. If your machine isn't part of that forest you can't authenicated to that forests AD. If you get it working, with your pc in your forest and the share in a different forest without a forest trust, please let us know. You should be glad you are running 2003. Forest trusts weren't available in 2000 AD Imagine the power if you knew how to internet search