Windows Forum

Ask something
Discussion Locked

2000 2003 DCs cannot establish trust

0 helpful
3 replies

by chriswilds1

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Domain controllers in different forests have DNS, WINS, DHCP (one high, one low same subnet), configured. Attempting to establish trusts starting from either server always produces error "Domain controller cannot be contacted".
I've tried to verify the settings over and over. As they are assigned IP by my dhcp router I have reconfigured to static IP with no help there.
Wins and DHCP I've tried assigning the other Wins server on each, and DNS forwarding to the other, no help from either side. Ideas?

3 replies

by cg it

humm 2 different domain forests [I'll assume each forest has some domain trees in it] and your trying to establish a trust relationship between the forests. First is are both running Active Directory in native mode. Universal security groups only work in Native mode and universal security groups are needed for cross forest authentication. Enterprise Admin rights are required. Domain level admin rights dont give you enough permission to in a multi domain multi forest enterprise setup.

by chriswilds1

Hmmm. They are both running Windows 2000 Native mode. That's 2000 Native on 2003 Server, note.

Trees/domains/forests . I have one 2003 Server that is the DomainController and is the whole ball-of-wax. And I have one 2000 Server DC which is the whole ball-of-wax. Should this be complex to set up? It's only two servers, and each are self-contained DC, Wins, Dhcp.

This discussion is closed to new replies.