Connect w2k3 ent. domain-servers in a forest

I have installed three windows 2003 servers in seperated domains. Before the migration to domain server acting as a member server, there wasn't any authentication problem with the primary domain. After the migration:
I can add a user from the primary domain to the local group on the child domain server and use a mapped file witout any problems. However when i want to add a user created on the child domain to a local group (through a global group) on the primary domain server, i receive a message with authentication denied.
On the primary server is also the AD from the both child domains NOT visible and tells me the domain servers aren't connected.
There is only one DNS server running and is the same as the primary server.
The ldap sessions are created fro both servers.
I found in the log an error pointing to the "secure channel" and telling me the inbound trust has "insufficient access rights to perform the operation ".
All the trusts are created and setup as a two-way trust.
Additional:
All servers are connected to one switch.
one server is running on vmware v4.5.2 and the other on virtual server 2005.
All have the same IP-range and subnet.
It is also possible to map and use a share from the child domain onto the primary domain controller using an account on the primairy controller.

Please plaese help me out with this issue.
Maybe you send me some detailed information or let me know where i can find a step-by-step manual.

Thanks in advance.

Regards,
Jan Sleeboom

 

Hi Jan and welcome.

To clarify some terms for me - do you have the 3 servers set up as Domain Controllers or as Member Servers?

Also, take a look Here and see if those directions pretty well match what you did.