Establishing an External Domain Trust

Posted on 2007-10-01
Last Modified: 2012-06-27
Domain A - Production - need to establish trust relationship with Domain B  - need to TEST ADMT tool to migrate users from Domain A to Domain B (Company is splitting).

Domain A - is W2000 Native domain, W2000 Forest
Domain B - is W2003 domain, W2000 Forest

Domain A - DNS Forwarding to Domain B - Domain B - DNS Forwarding to Domain A - nslookup resolves.
UserID used is DA and EA in both domains - even has same password (I like to keep it simple).

Get error that LSA is unable to obtain an RPC connection to the domain controller Please check that the name can be resolved and that the server is available.

Nslookup resolves the name fine.

Am I missing something else?
Question by:eops_hw
    LVL 6

    Expert Comment

    I would also create secondary zones in each domain pointing to the other domain.
    LVL 11

    Accepted Solution

    i would say create a stub zone pointing to the other domain, which can fix the issue and then you can create the trusts properly.

    Hope this helps
    LVL 13

    Expert Comment

    by:Kini pradeep
    hope the two domains donot have the same netbios name... cause if they do then the trust cannot be formed.
    create secondary zones pointing to each other and enable zone transfers as mentioned by chuck williams...

    Expert Comment

    I am having the same issue, but I have setup the forwarders between the two domains and I am unable to access the other domain. When I try to validate i get this message:

    The Local Security Authority is unable to btain an RPC connection to the domain controller Xtranet.www.statewide.  Please check that the name can be resolved and that the server is available.

    Expert Comment

    When I try to browse by the IP I get this message:

    The system cannont find message text for message number 0x in the message file for \\xx.xx.xx.xx\.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
    I know all systems administrator at some time or another has had to create a script to copy file from a server share to a desktop. Well now there is an easy way to do this in Group Policy. Using Group policy preferences is not hard. The first thing …
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now