Solved

Setting up Win 2003 Trusts

Posted on 2006-07-12
3
184 Views
Last Modified: 2010-03-18
Hello,

I am trying to setup a trust between domainA and domainB (both 2003 server).  They are physically in different states but are connected via a VPN tunnel.

when I try to setup the trusts, I get a message that the specified domain cannot be contacted.  I'm sure this is a DNS issue.  I created a new forward lookup zone for the domain, but it really didn't seem to help and I am sure I am doing something incorrectly.

Thanks for the help.

- Chris
0
Comment
Question by:caw01
  • 2
3 Comments
 
LVL 13

Accepted Solution

by:
prashsax earned 500 total points
ID: 17093600
Yes, you need to create a secondary zone of the other domain on your DNS server.

Then on the remote Primary DNS server, specify the IP address of this server for zone transfer.

With this your secondary DNS zone would copy all the records and start resolving the names for other domain.

Same would have to be done on other side. Create a secondary zone of your domain on other side and specify its IP address in zone transfer.

0
 

Author Comment

by:caw01
ID: 17093914
Ok, done.  Now I need to create the trust, but I am not sure what kind of trust I want to build.  

I DO NOT want DomainB to have Administrative rights over DomainA.

Any thoughts and or suggestions?
0
 
LVL 13

Expert Comment

by:prashsax
ID: 17093965
By default even if you create a two way trust other domain admin will not have admin rights in your domain. Nor will you have admin rights on this domain.

All you both can do is to provide permision to other domain users access to shared resources in your domain.

So, don't worry about him having admin rights on your domain.
0

Featured Post

Free Tool: Postgres Monitoring System

A PHP and Perl based system to collect and display usage statistics from PostgreSQL databases.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Nslookup is a command line driven utility supplied as part of most Windows operating systems that can reveal information related to domain names and the Internet Protocol (IP) addresses associated with them. In simple terms, it is a tool that can …
Have you ever set up your wireless router at home or in the office to find that you little pop-up bubble in the bottom right-hand corner of Windows read "IP Conflict - One of more computers on the network have been assigned the following IP address"…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question