Can not Set up Domain Trust from WIN2000 ADV SRV down to a NT4 Domain

Hello,
I am trying to create an trust relationship down to another city where our NT4 domain resides. At my location we use Win 2000 ADV SRV SP3. From Point to Point we have a VPN client setup that wraps our data via these little client boxes we set up. We guide these VPN clients by static routes via our router down to the routers there. I have included the address and names into my DNS, HOSTS, and LMHOSTS files. If i punch in the \\NTDOMAIN in explorer i can see the files and goods :). However Trusts is not able to contact the other machines authentication service. i have recieving the following message from Active Directory Domains and Trust MMC (Note: NTDOMAIN intentionally typed there) =) ...

Popup:
The NTDOMAIN domain cannot be contacted.
If this domain is a Windows domain, the trust cannot be setup until the domain is contacted. Click Cancel and try again later.
If this is an interoperable non-Windows Kerberos realm and you want to set up this side of the trust click OK.

PS i have poked severals holes in the firewall. I may have the wrong ports if any.
kim77751Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

BaddogCommented:
What mode are you running the W2K domain---native or mixed-mode? If you are running W2K in native mode, it will not accept a trust relationship from NT4 PDCs, only from other W2K DCs.


BDog

Going from mixed-mode to native mode is a one-way trip,,,you cannot revert back to mixed-mode.
0
kim77751Author Commented:
Hey Hi,

Sorry i should have stuck that guy in there. I am using Mixed Mode.
0
firebirdk56Commented:
Your VPN connection need to allow NETBIOS traffic to go both way. NT 4.0 using Netbios, win2k can live with only tcp/ip
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

kim77751Author Commented:
Hi FireBird,

Thank you for the suggestion. The VPN Clients are allowing NetBIOS also ive tried using it's WAN IP to connect instead of the Static Routed IP.
0
kim77751Author Commented:
Hi FireBird,

Thank you for the suggestion. The VPN Clients are allowing NetBIOS also ive tried using it's WAN IP to connect instead of the Static Routed IP.
0
kim77751Author Commented:
Hi FireBird,

Thank you for the suggestion. The VPN Clients are allowing NetBIOS also ive tried using it's WAN IP to connect instead of the Static Routed IP.
0
gillitjCommented:
I had this same problem today and an IT guy, Jonathan C, at our main campus gave me the solution.

I kept trying to use the GUI and there is a problem with it.  Use the NETDOM.exe provided by Microsoft.  This is the comand line interface.We had to play with it a little bit becuase it is confusing but it fixed our problem.  Hope it works for you.

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windowsserver2003/proddocs/server/domadmin_createRealmTrust.asp

Jody
0
tatwCommented:
netdom trust ABC /domain:CDE /add /oneside:trusting /passwordT:password

ABC AD native mode domain trust CDE NT4 domain with password "password"

p.s. The GUI also don't work for verification. Please use netdom to verify again.

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
CleanupPingCommented:
kim77751:
This old question needs to be finalized -- accept an answer, split points, or get a refund.  For information on your options, please click here-> http:/help/closing.jsp#1 
EXPERTS:
Post your closing recommendations!  No comment means you don't care.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.