AD Sites and Services

I have four dealerships (separate subnets) linked by MPLS with two different domains in operation (actually two different forests, technically, I guess).  Let's call them and  Three of the dealerships (previously a separate company) are on domain and one is on has a DC in each of its three dealerships with the PDC in the new headquarters building. has its PDC in its separate building and a backup DC in the main headquarters building where's PDC also resides.  All domain controllers are running Server 2003, but the functional environment is Windows 2000 since's DC's had been running Server 2000.  My question is how to properly set up Sites and Services with this two domain situation.  We have (or had) a two-way trust between A and B, but recently, I am only able to validate that trust from B's PDC to A and A's PDC in the main headquarters building to B.  The DC's in the other two dealerships say they can't find a DC to validate the trust with B.  Under B's Sites and Services, I have two sites created, one for B's backup DC in the main building (with that backup DC as the server for that site) and one for the building the PDC is in, but under A's Sites and Services, I have only one site setup with all three DCs listed as servers for that site.  I do, however, have all four different subnets listed under A's Sites and Services, but only two subnets listed under B's as of right now.  Do I need to create a site under A for B, and vice versa, even though they're on different domains?  Needless to say, I'm a little lost, and this is a long-winded question.  Any help would be appreciated.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

To answer your last question - no you do not need to create a site for B under A or vice versa.

The Sites and Services mmc only pertains to DCs (and their replication) of the same domain - so A and B will be completely separate. It sounds like you have the DCs of configured correctly...two sites, and two subnets that are assigned to those appropriate sites.

It sounds like A's sites and services needs some changes though. First, remove the subnet for the remote building as nothing from domain A lives there. Second, create two more sites for the dealerships so you've got sites that represent all three locations. At the same time assign the appropriate subnets to those two new sites - resulting in three different sites, each with their own subnet assigned. Lastly move each of the two DC's that are currently in the main building's site to their appropriate (newly created) site.

I'd start there and we'll see if your problems go away!

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
fabiounessAuthor Commented:
Well, I don't know if it was your suggestions alone, or that I also added a forward lookup zone for on one of the remote DC's that couldn't validate the trust, but I am able to validate now!  Much appreciated!  Doesn't DNS replicate all its info between DC's in the same domain, however?  In other words, why would the PDC have as a forward lookup zone, but the other DC's didn't?  Did that have to do with the Site configuration as well?
Probably a combination of the two - with a little more weight on the DNS!

DNS will replicate between all the DCs in the domain as long as two requirements are met. First being that each DC is running DNS; second being that the zones are 'Active Directory Inegrated' and not just a standard Primary or Secondary zone. You could use zones that are not AD integrated, but would have to manually configure the zone transfers settings between DNS servers as AD would not have the info to replicate.
fabiounessAuthor Commented:
The DCs are all running DNS, but the two remote ones had as a secondary zone.  I changed them to primary and AD integrated.  Thanks again!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.