kim77751
asked on
Can not Set up Domain Trust from WIN2000 ADV SRV down to a NT4 Domain
Hello,
I am trying to create an trust relationship down to another city where our NT4 domain resides. At my location we use Win 2000 ADV SRV SP3. From Point to Point we have a VPN client setup that wraps our data via these little client boxes we set up. We guide these VPN clients by static routes via our router down to the routers there. I have included the address and names into my DNS, HOSTS, and LMHOSTS files. If i punch in the \\NTDOMAIN in explorer i can see the files and goods :). However Trusts is not able to contact the other machines authentication service. i have recieving the following message from Active Directory Domains and Trust MMC (Note: NTDOMAIN intentionally typed there) =) ...
Popup:
The NTDOMAIN domain cannot be contacted.
If this domain is a Windows domain, the trust cannot be setup until the domain is contacted. Click Cancel and try again later.
If this is an interoperable non-Windows Kerberos realm and you want to set up this side of the trust click OK.
PS i have poked severals holes in the firewall. I may have the wrong ports if any.
I am trying to create an trust relationship down to another city where our NT4 domain resides. At my location we use Win 2000 ADV SRV SP3. From Point to Point we have a VPN client setup that wraps our data via these little client boxes we set up. We guide these VPN clients by static routes via our router down to the routers there. I have included the address and names into my DNS, HOSTS, and LMHOSTS files. If i punch in the \\NTDOMAIN in explorer i can see the files and goods :). However Trusts is not able to contact the other machines authentication service. i have recieving the following message from Active Directory Domains and Trust MMC (Note: NTDOMAIN intentionally typed there) =) ...
Popup:
The NTDOMAIN domain cannot be contacted.
If this domain is a Windows domain, the trust cannot be setup until the domain is contacted. Click Cancel and try again later.
If this is an interoperable non-Windows Kerberos realm and you want to set up this side of the trust click OK.
PS i have poked severals holes in the firewall. I may have the wrong ports if any.
ASKER
Hey Hi,
Sorry i should have stuck that guy in there. I am using Mixed Mode.
Sorry i should have stuck that guy in there. I am using Mixed Mode.
Your VPN connection need to allow NETBIOS traffic to go both way. NT 4.0 using Netbios, win2k can live with only tcp/ip
ASKER
Hi FireBird,
Thank you for the suggestion. The VPN Clients are allowing NetBIOS also ive tried using it's WAN IP to connect instead of the Static Routed IP.
Thank you for the suggestion. The VPN Clients are allowing NetBIOS also ive tried using it's WAN IP to connect instead of the Static Routed IP.
ASKER
Hi FireBird,
Thank you for the suggestion. The VPN Clients are allowing NetBIOS also ive tried using it's WAN IP to connect instead of the Static Routed IP.
Thank you for the suggestion. The VPN Clients are allowing NetBIOS also ive tried using it's WAN IP to connect instead of the Static Routed IP.
ASKER
Hi FireBird,
Thank you for the suggestion. The VPN Clients are allowing NetBIOS also ive tried using it's WAN IP to connect instead of the Static Routed IP.
Thank you for the suggestion. The VPN Clients are allowing NetBIOS also ive tried using it's WAN IP to connect instead of the Static Routed IP.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
kim77751:
This old question needs to be finalized -- accept an answer, split points, or get a refund. For information on your options, please click here-> http:/help/closing.jsp#1
EXPERTS:
Post your closing recommendations! No comment means you don't care.
This old question needs to be finalized -- accept an answer, split points, or get a refund. For information on your options, please click here-> http:/help/closing.jsp#1
EXPERTS:
Post your closing recommendations! No comment means you don't care.
BDog
Going from mixed-mode to native mode is a one-way trip,,,you cannot revert back to mixed-mode.