Hi All,
We are part of ABC.com domain and all the users are migrated from the legacy domain XYZ.com. The legacy domain is having child domains Apac.xyz.com , Amer.xyz.com , EMEA.xyz.com. We have external trust between all these child domains and ABC.com domain.
Recently we created a forest trust between ABC.com and DEF.com domain and we created name suffix routing in the name xyz.com in the DEF.com domain. They have UPN XYZ.com.
The existing environment working fine. and all the existing external trusts are working fine. But we face issue in few locations of EMEA.xyz.com domain. The issue is that the ABC.com domain user trying to access the share in Emea.xyz.com. the user faced issue that " the system detected a possible attempt to compromise security" . We verified all the trusts and domain controllers are are good. We didnt find any issue in the DC or trust. We restarted all the dc in ABC.dom AND EMEA.xyz.com . At last for testing we disabled the "XYZ.com" name suffix routing in the trust between "ABC.com - DEF.Com" then it started working fine for all the affected users.
We dont have any clue how the name suffix routing creates problem.
If the name suffix routing is the problem , how all the other locations and other legacy child domains Amer.xyz.com and Apac.xyz.com works well.
If someone shred some light on this would be helpful for us to find the root cause