Windows Forum

Ask something
Discussion Locked

Problem with two-way trust relationships

0 helpful
5 replies

by chrisaaaaaa23 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have to domains ROTRAX1 and MEA3. Both domains have a single PDC each running DNS, WINS and DHCP. MEA3's PDC is running NT4 server SP6a only. ROTRAX1's PDC is running NT4 Server SP6a along with MS Proxy Server.

ROTRAX1 has an IP scope 10.6.x.x. MEA3 has an IP scope 10.3.x.x.

ROTRAX1 is the main domain for a company - MEA3 is the domain of a smaller branch of the company. MEA3 is to get E-mail (Exchange) and Internet through the ROTRAX1 domain.

There is a leased line between the two domains, and because ROTRAX1 is running Proxy server, I have had to add a static route so that all traffic to 10.3.x.x goes through the router that is connected to the leased line and NOT through the Proxy server.

Now, I need to get a two-way trust going. However, although I can get ROTRAX1 to trust MEA3, I can not get MEA3 to trust ROTRAX1 - and that means no e-mails for the people on MEA3.

I need suggestions to get the two-way trust working...

5 replies

by rcc

Hi
We are running a similar setup over several WAN links with a single point proxy, and 3 domains.
You need to make sure that the DC's for the two domains can see each-other. BTW, make sure that none of the servers is Small Business Edition, asyou can only establish one way trusts with this one (actually you can only get other domains to trust them).
Make sure you have the two WINS databases replicating or have entries like 10.6.(rest of your PDC IP address) YOURPDCNAME #PRE #DOM:MEA3You will have to have these entries, one in ROTRAX1 PDC's lmhost file pointing to MEA3 and one on MEA3's PDC lmhost file pointing to ROTRAX1 PDC.
If you need further assistance, let me know and I'll be happy to help. I didn't get it right the first time myself, so...
Regards,
Radu

by nettek

The fact that you have a PDC - running WINs and DHCP - that you are using as a Proxy server can cause you big problems down the road, and may be contributing to your problem. Microsoft does not recommend setting up a domain controller, WINs server, or DHCP server in a multihomed environment (one server, two nics, each nic on different network). Your Proxy server should be standalone, and your PDC, WINs, and DHCP should not be multihomed.

For reference, check out the following Knowledge Base articles:
Q150144
Q184832
Q181774
Q265129
Q150737
Q164308
Q185786
Q157025
Q221210
Q191611

Good luck.

This discussion is closed to new replies.