Windows 2000 cross forest trust setup

G

Guest

Ive tried setting up a trust relationship between 2 Windows 2000 forests to
no avail. I keep getting the "domain cannot be contacted" error message. This
generally means name resolution problems but I added an entry for the target
DC in DNS can can resolve the name. I do not use WINS and hope not to if
possible. Any idea's of where to go from here? Do I have to create a new zone
for the target domain on my DNS servers?

Thanks in advance.
 
R

Richard G. Harper

WINS will probably be necessary - I have found that it usually clears up any
cross-forest and cross-range name resolution problems.
 
G

Guest

Thanks for the help Richard. Instead of using WINS I went the DNS route
instead. I setup a secondary zone for the target domain on the souce domain's
DNS servers and vice versa. Once that was setup, the trust worked great. I
assume the trust creation process makes use of the AD service records in the
DNS zones and having them host a secondary copy of the domain they are trying
to trust fixed the name resolution issues.

Richard G. Harper said:
WINS will probably be necessary - I have found that it usually clears up any
cross-forest and cross-range name resolution problems.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* In fond memory ... Alex, you shall be sorely missed
* http://www.aumha.org/alex.htm


Arcom said:
Ive tried setting up a trust relationship between 2 Windows 2000 forests
to
no avail. I keep getting the "domain cannot be contacted" error message.
This
generally means name resolution problems but I added an entry for the
target
DC in DNS can can resolve the name. I do not use WINS and hope not to if
possible. Any idea's of where to go from here? Do I have to create a new
zone
for the target domain on my DNS servers?

Thanks in advance.
 
R

Richard G. Harper

Excellent news, I'm glad you got it sorted out.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* In fond memory ... Alex, you shall be sorely missed
* http://www.aumha.org/alex.htm


Arcom said:
Thanks for the help Richard. Instead of using WINS I went the DNS route
instead. I setup a secondary zone for the target domain on the souce
domain's
DNS servers and vice versa. Once that was setup, the trust worked great. I
assume the trust creation process makes use of the AD service records in
the
DNS zones and having them host a secondary copy of the domain they are
trying
to trust fixed the name resolution issues.

Richard G. Harper said:
WINS will probably be necessary - I have found that it usually clears up
any
cross-forest and cross-range name resolution problems.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* In fond memory ... Alex, you shall be sorely missed
* http://www.aumha.org/alex.htm


Arcom said:
Ive tried setting up a trust relationship between 2 Windows 2000
forests
to
no avail. I keep getting the "domain cannot be contacted" error
message.
This
generally means name resolution problems but I added an entry for the
target
DC in DNS can can resolve the name. I do not use WINS and hope not to
if
possible. Any idea's of where to go from here? Do I have to create a
new
zone
for the target domain on my DNS servers?

Thanks in advance.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top