Cannot Create Trust

[Guest]

We are planning on deploying 2003 Server in our facility and are working on a
migration strategy. This will involve creating a new Windows 2003 domain and
migrating our existing Windows 2000 domain to it.

As part of are effort to migrate we want to use ADMT to migrate the existing
W2000 AD over to our 2003 domain. When I attempt to create a two-way trust
between the domains, the 2003 Domains and Trusts wizards does not recognize
my esisting 2000 domain name even though I can browse to it via My Network
Places.

Any idea on where to look to solve this?

 

[Ryan Hanisco]

In order to do that you need to add domain entries to your LMHOSTS file so
that your computers can locate the other domain. Add the entries with the
domain designation and then ping from one to the other with just the domain
name.

The alternative is to use DNS forwarding and search scope, but the LMHOSTS
is better as it only affects your servers and is temporary.

ADMT is powerful and dangerous. STAGE and TEST every aspect of this.
Workstation and security migration are especially tricky... and do tests
before you delete the SIDHistory (if you decided to remove this as a
potential security hole).