Link to home
Start Free TrialLog in
Avatar of vbowman
vbowman

asked on

Setting up a trust between two 2003 Servers

Hi all,

I am having a problem setting up a trust relationship between two domains.  One server is running Server 2003 standard and the other one is a new server that I am setting up that came with Server 2003 R2.

When I try to setup the trusts between the two I receive a message saying that

The New Trust Wizard cannot continue becasue the specified domain cannot be contacted.

Either the domain does not exist, or network or other problems are preventing connections.

I can ping each of the servers so there is connectivity.  But I need them to be able to talk to one another.  I'm sure I am doing something stupid here, but have no clue as to what.  Any help would be greatly appreciated!
Avatar of oBdA
oBdA

You need a working DNS resolution between the two domains, and you need to create the trust using the domain's FQDN name.
To get this name resolution, either setup secondary forward lookup zones for the respective other domain on each DNS servers and let them replicate, or use conditional forwarding (Properties of the DNS servers, tab "Forwarders") for the respective other domain on each DNS server.
Avatar of vbowman

ASKER

I tried the first option you mentioned, but I get Zone not loaded by DNS Server.  I guess I missed a step.
You need to add the secondary server as name server to the properties of the zone on the DNS server that is the primary for the domain, otherwise the DNS server holding the primary zone won't allow the replication.
Avatar of vbowman

ASKER

I am sorry I must be dense today.  I am not sure I understand what you mean with the last entry.  I did add seconday forward lookup zones for both of the domains.  Do you mean I also need to add them in the primary zone?  If so, how do I accomplish this?  Thanks in advance!  
You need to register the secondary DNS servers as valid DNS servers on the zone hosting the primary zone; if the primary DNS server doesn't know the sceondary, it will refuse the replication of the zone.
Look in the properties of the zone on the primary server, there should be a tab "DNS servers", where you can define to which DNS servers can be replicated.
Avatar of vbowman

ASKER

Do you mean under properties of domain.local under the forward lookup zone?  Coz I do not see that tab.  Maybe I am totally in the wrong place.  All I see is Zone Transfers.

ASKER CERTIFIED SOLUTION
Avatar of oBdA
oBdA

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of vbowman

ASKER

That is where I did set it up.  Still no trust.  Darn, any other thoughts?
Avatar of vbowman

ASKER

I think I am setup!  Thanks for all your help.  You are a gem.