I have a child domain W2k3 and an NT4 domain with a trust
relationship (Two way trust).
The trust has been established according to KB Microsoft
without problem.
From AD, I can browse NT4 domain users and add in local
group.
From UserManager NT4, I can browse W2k3 domain users and
add in local group.

.....But when I assign local group NT4 DOMAIN with W2k3
user domain membership to get access to the WNT4 server
ressource, I have already Denied Access for W2k3 user.

I don't have this problem when I assign permission
throught local Group Member NT4 Server with W2k3 domain
user membership.

I have already update LMHOST on PDC NT4 and enable SAM
enumerate throught DC GPO and Registry NT4 PDC.
When I verify trust from AD, It's OK.

.....Thanks for your help !