Discussion Locked

Creating Trust between NT 4.0 and 2000

0 helpful
27 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am trying to create a 2 way trust between windows NT and windows 2000 domains. Other articles suggest creating entries in each server's LMHost file and I've done this. Also verified WINS. I can see both domains on network neighborhood.

I have followed the instructions from MS article 306733. On step 3, it asked me to verify trust with user credentials on the domain I'm trying to establish trust and receive the following error: specified domain does not exist or cannot be contacted. Step 7, states error password is incorrect.

All other steps are okay.

Quick review
1. On WIN2K (domains that trust this domain) Okay
3. Verify step 1. - receive error listed above.
4. On NT server (trusting domains added WIN2K domain)Okay
5. On WIN2K (domains trusted by this domain) added NT domain. Okay
6. On NT (adding WIN2K domain) received incorrect password.

Has anyone seen this before? Does anyone have any suggestions?

27 replies

by bchesmer

What sort of (if any) event log errors are logged in each of the (W2K & NT) boxes? This may provide addtional insight to the problem/solution.

Comment back with the info if possible.

by cg it

I trust that the Windows 2000 domain controller is running in mixed mode. If not, then the NT domain controller has to be "OUTSIDE" of the Windows 2000 native mode domain LAN.

by netgoofy

I am evolved with tracyp in trying to help her solved this problem. As far as answer1 there are no logs indicating a problem. As far as Answer2, yes Win2k is in mixed mode. And as far as Answer3, this has been tried with the same origianl results. Any more suggestions will be wonderful....

Randy

by acattr

if you have multiple domain controllers on both sides, try to use different ones for this process. When I did this I had to use the server that was designated as the PDC emulator(normally the first server setup as a 2000 domain controller)

by netgoofy

Answer 5 Does not work for us, we only have 1 domain on each side...

But Thanks for the support, please continue to send responses

by netgoofy

The answer to Question 7 is Yes, it is a PDC, however we have in total 3 nt servers, 1-pdc, and 2-bdc's.

by rob

i think you have to use a w2k server as a pdc emulator for the nt servers.

by rob

i think you have to use a w2k server as a pdc emulator for the nt servers.

by dodikus

Please explain few things,we are talking about external trust between W2000 and NT4.0 domains, you manually created trusts, they are one-way, and you know that that kind of
trust is not transitive.

On win2000 server:

1. in active directory domains and trusts,
open properties of NT domain
2. click on trust tab, check direction of trust,
3. click add, enter NT domain name, type password
(administrative username and password)

Also very important, you must use same password on both sides!
if password isn't same, you must delete trust and create it again with correct password.

4. you are prompted to verify

On NT server:
1. Establish the trust to w2000 domain

All steps are O.K.?

by netgoofy

Answer from question 11, is all correct, I followed the steps made sure that password was the same on both side, but during the verification process it all goes back to my original problem, which is stated above.

This discussion is closed to new replies.