Windows Forum

Ask something
Discussion Locked

Cant establish a trust thru ISA server

0 helpful
7 replies

by tpcosmo 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have two W2K domains, connected via PPTP VPN. I would like to establish a trust relationship between the two domains, but I get an error saying the domain cannot be contacted. I am pretty sure DNS is set up properly, as I can ping the remote DC, but cannot establish the trust. My question is regarding ISA server, and if I have to do anything with that to allow the trust. I have ISA server running on one server, but no the other. Any help would be great.

7 replies

by timwalsh

Take a look at MS Knowledge Base article 329807 - INFO: ISA Server Does Not Support Domain Members In Perimeter Network

If I read this article correctly, ISA won't support what you are trying to do.

by joseph moore

You should make sure that ISA is allowing ports 135, 137-139, & 445 from and to the two domains.

Ok. Can you PING the machine name of the remote DC? If so, then try this. Open a Command Prompt and type in:

nbtstat -a MACHINENAME

replace "MACHINENAME" with the machine name of the remote DC. Hopefully, this will work. If not, check the port setting on ISA.

You need to be able to resolve the machine name of the remote domain controller in order to set up a trust. And if your DNS is correct, then you need to look at these other issues in Microsoft name resolution.

hope this helps

by darthkim

Also, i would highly recommend learning how to use the following tools

netdom
netdiag
dcdiag

the last two utilities can be found under the folder tools on the windows 2000 server cd (windows support tools)

they can test all sorts of trustand replication issues from the command line.

This discussion is closed to new replies.