Explicit Trust Authentication

[Scott McAvoy]

Hi All

I am trying to create an explicit trust between two domains in different
forests.

When i try to add the first side of the trust to Active directory
Domains and Trusts i get a message back saying "Access to the domain
<domain name> is denied. Check the password is correct and then try
again." after i add the domain name and password.

The domains are on different sites connected through firewalls which
have an open ruleset for the moment via a private WAN link. Both
machines are Win2K DCs running SP3.

Anyone seen this error before?

Scott

 

[Steven L Umbach]

Hi Scott. I have not done that in a while, but if I remember correctly, you
need to be entering the name/password of someone in the enterprise
administrators group of the other domain and make sure your dns is set up
correctly such as each domain's dns severs being secondary dns server for
the other domain. You may want to post in the win2000 active_directory
newsgroup also if problems persist. --- Steve

 

[Scott McAvoy]

Thanks Steve

I failed to mention that the firewalls are using NAT which i believe may
be causing the problem. I'm not sure its even possible to create
explicit trusts when using NAT.

Scott