Domain A (NT4)?
All User accounts are in Domain A
Domain B (Windows 2000)?
Computer Account live in Domain B
Domain B trusts Domain A (required) A one way trust is all that is required.
User on computer in Domain B logs on using DomainA\user1. Is this correct?
If the above is how your domain is constructed, then the links above that discuss how the global groups from Domain A are attached to the user's security token at Logon.
so...
if INGROUP(DomainA\Global1) should work
Are your groups in Domain A local or global groups?
Let me know if the above description is accurate and if the example does or does not work.
Please post the contents of HKEY_CURRENT_USER\Software\KiXtart\TokenCache from a computer in Domain B.
