Solved

Domain Trust between server 2003 and 2000 breakdown

Posted on 2006-07-01
4
2,841 Views
Last Modified: 2012-08-13
I performed the following steps:
 - Created a new installation of server 2003 (std)
 - Set it up as a domain controller with DNS, WINS etc.,
 - Created a two-way trust between it and an already existing w2k domain with domain-wide authentication (This was created from the w2k3 domain, if that's useful)

All appeared to be ok until after about 24 hrs the trust broke down, but only in one direction (w2k domain could not connect to w2k3). The other direction appears to be working fine.

The error from the w2k DC when I try to verify the trust is: Information from the primary domain controller for the domain w2k3.loc cannot be obtained because: The RPC server is unavailable. Make sure that the PDC is operating properly and then try again.

The error from the w2k3 DC when I try to validate the trust is: Windows cannot find a domain controller for the w2k.loc domain. Verify that a DC is available and then try again.

Any ideas?
0
Comment
Question by:windylad
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 15

Accepted Solution

by:
harleyjd earned 500 total points
ID: 17023740
damn, that sounds like what I went through on Thursday and Friday.

I have nice DNS replication set up between domains, but I could not get the trust to stay in-place once I had it established.

In the end I removed all netbios names from the lmhosts file at each end, and stopped the DC's from registering and using WINS. Once I did that I got the trust validated no problems.

So, make sure your DNS is completely replicated by either using secondaries at either end, or using forwarders (and the cool 2003 conditional forwarders!) then take out the WINS server from the DC's


0
 
LVL 8

Expert Comment

by:bilbus
ID: 17025130
sounds like a dns problem. What do you get when you ping
domainname.com
dc1.domainname.com
dc2.domainname.com

(dc.domainname.com replace with name of domain controlers and name of domain)

do this on both domains and see if you can ping all the names.

post here with your status
0
 

Author Comment

by:windylad
ID: 17030658
There was indeed a problem with the DNS setup. I did have forwarders configured, but there was a problem with the replication due to zone transfer enabling.
I have corrected the problem and re-created forwarders and trusts from scratch. All is good at the moment, but I'll leave it a day or so before closing this question and allocating points. Thanks for the help guys.
0
 

Author Comment

by:windylad
ID: 17050919
That looks like it was the problem. It has been up and running for a few days now with access in both directions. Many Thanks for the help guys.
0

Featured Post

Free eBook: Backup on AWS

Everything you need to know about backup and disaster recovery with AWS, for FREE!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question