two-way trust relationship

[Joe Grover]

Our company has recently acquired another company. We both have Active
Directory domains (ours is Windows 2000, theirs is Windows 2003). I would
like to set up a two-way trust relationship between our two directories.

Unfortunately I don't know how to make our domain see their domain. We have
a direct point-to-point T3 connection between our two networks, but I don't
know how to enable my domain controllers to see their domain. I can
duplicate this problem by setting up a Win2000 or Win2003 box with AD on it
at home, then bringing it here to the local network. If I go into the
Trusts tab in AD Domains and Trusts and select my test domain as a domain I
trust and enter a password, I get a message that the domain cannot be
contacted.

Any help would be appreciated.


Joe

 

[ptwilliams]

The easiest way, and the way I prefer, is to hold a secondary copy of the
opposite DNS servers zone in each domain. That is, domain A has a secondary
zone for domain B, and vice versa.

Once this is in place, change the DNS client settings so that you list both
your and their DNS suffixes and you're done.


--

Paul Williams

http://www.msresource.net
http://forums.msresource.net



Our company has recently acquired another company. We both have Active
Directory domains (ours is Windows 2000, theirs is Windows 2003). I would
like to set up a two-way trust relationship between our two directories.

Unfortunately I don't know how to make our domain see their domain. We have
a direct point-to-point T3 connection between our two networks, but I don't
know how to enable my domain controllers to see their domain. I can
duplicate this problem by setting up a Win2000 or Win2003 box with AD on it
at home, then bringing it here to the local network. If I go into the
Trusts tab in AD Domains and Trusts and select my test domain as a domain I
trust and enter a password, I get a message that the domain cannot be
contacted.

Any help would be appreciated.


Joe

 

[S.J.Haribabu]

Hi Joe,

I did some research and found the following article on how to troubleshoot
the trust relationship between the forests. Please go thru checklist
whether you follow the same. Firstly the DNS server whether you are able to
resolve the destination domain.

http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/p
roddocs/en-us/Default.asp?url=/resources/documentation/windowsserv/2003/stan
dard/proddocs/en-us/x_checklist.asp

Also go thru the additional study material at
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/p
roddocs/en-us/Default.asp?url=/resources/documentation/windowsserv/2003/stan
dard/proddocs/en-us/x_c_foresttrusts.asp

Thanks,
(e-mail address removed)

This posting is provided "AS IS" with no warranties, and confers no rights.