IT Employment

Ask something
Discussion Locked

Make Trusts between 2 domains

0 helpful
5 replies

by alexr 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I'm trying to make trusts between two 2003 domains. Two sites connected thru VPN. Both of them single label virtual domains. When I try Trusts Wizard and put BIOS name of the second domain the system can not find it. I think I need to add something to DNS but I don't know what exactly.
Any idea?

Thanks.

5 replies

by bfilmfan

You will need WINS running on the domain controllers to create a trust using NETBios names.

Have you created secondary DNS zones for the domains to correctly handle forward and reverse lookups for the domains?

You will also have to have the correct ports open. These are specified in http://support.microsoft.com/kb/179442/en-us.

Some tools to assist in troubleshooting trusts: http://technet2.microsoft.com/WindowsServer/en/Library/108124dd-31b1-4c2c-9421-6adbc1ebceca1033.mspx

by alexr

Thank you for answering me. With WINS no problem I can ping DC from both sites by name. The ports are OK as well - everything is opened. I just don't know if I can do it with 2 diffrent forests and I did not get your point about secondary DNS zones. Could you elaborate, please.

by alexr

I succeeded to create it but only one-way. My ISP says that VPN does not block anything. I believe it is kind of authenication problem. But both the same 2003. The different that first I installed from scratch and the second upgrated from NT4 as 2003 interim. Do you know where to look at?

by alexr

Ooops. I just realized that I can create Kerber trust within same forest only. So what I can do if I got 2 different forests?

by alexr

Looks like I succeeded. I created external 2-way trust. From one site it works fine from other one I still get error.

This discussion is closed to new replies.