Link to home
Start Free TrialLog in
Avatar of Ken-doh
Ken-doh

asked on

Server 2003 setting up one way trust problem -

Hi

we are setting up a 1 way trust between 2 domains

when I validate the trust on the domain controller  in the trusting domain - it validates OK :)

BUT when i try to validate the trust on the domain controller in the domain to be trusted I get an error


---------------------------
Active Directory
---------------------------
Windows cannot find a domain controller for the xxxxxxx.co.uk domain. Verify that a DC is available and then try again.

I have setup each domain in my DNS so each forward lookup zone has both domains. BUT it still doesnt work
the machines can ping each other and are on the same network.

HELP! !!

Avatar of Steve Knight
Steve Knight
Flag of United Kingdom of Great Britain and Northern Ireland image

It needs to see the SRV records etc. in DNS, are they able to see each other's DNS completely, i.e. a secondary of the other forest's DNS or have you just created a new emptyish zone? You could probably resort to LMHOSTS entries, I've only ever done that NT4 to W2kX though not between two W2KX so not sure on that...

http://www.tek-tips.com/viewthread.cfm?qid=1226117&page=6
Avatar of Ken-doh
Ken-doh

ASKER

yes

there is a complete secondary zone, that is exactly the same as the other in the forward lookup zone - its marked as secondary

Avatar of Ken-doh

ASKER

as were not using WINS the tek tips isnt current - thanks thou....

its got me completly baffeled..
can you resolve the other domain controller using nslookup?
Avatar of Ken-doh

ASKER

yeah i can


however I solved the problem by adding forwarders to the other domain servers just now


:) so thats the solution

cheers thou
Probably silly question but is the dc in question pointing at itself I.e. secondary dns for dns in tcpip settings or maybe at another dc that won't have the secondary on?
Avatar of Ken-doh

ASKER

yes - its points to iteslf  - as dns server and our backup 1
Avatar of Ken-doh

ASKER

but its not got me solving my issue

i cant get IIS to write weblogs accross my trusts to my new server - despite setting null session shares and everything thing else under the sun :(
The backup one won't have the secondary on of course which could potentially be involved.

In any case if this is only to get logs from a to b can you not setup a script to do it hourly or whatever - you can map a drive with net use /user: in a scheduled batch file without any trusts being in place at all or setup a scheduled ftp of the logs.

Steve
Avatar of Ken-doh

ASKER

yeah....

but I have quite a few servers and I dont want to be worrying about scheduled tasks not running or problems, I have looked into null session shares as well but couldnt get that working :(
ASKER CERTIFIED SOLUTION
Avatar of Netminder
Netminder

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial