asked on

Creation of Forest Trust between Forests

Hi,
I have LiveDC.abc.com (for eg), installed Windows Server 2003 and Exchange server 2003, Now just i am separating this existing domain into two part one is NewDC.xyz.com, installed windows server 2003 and Exchange server 2007 and other is NewDC.pqr.com, installed windows Server 2003 and Exchange Server 2007.

For migration of User and mailbox, I have created Forest Trust between LiveDC.abc.com and NewDC.xyz.zom, and migrated 100 users (for eg) from abc.com to xyz.com and now i want to create Forest Trust between LiveDC.abc.con and NewDC.pqr.com for the migration of rest user and mailbox. Is it possible.(I want to keep previous trust also). if it is possible then any harm...........bcse all are different2 forest.

NewDC.xyz.com------Forest Trust--------------------------------------LiveDC.abc.com----------------------???-------------------------NewDC.pqr.com

Waiting for reply.....pls.....................

DocCan11

This is of course possible, you will just create another forest trust between LiveDC.abc.com and NewDC.pqr.com. The forest trusts however are NOT transitive in nature, meaning NewDC.xyz.com and NewDC.pqr.com will not trust each other through the existing trusts. If you want this you will need to create it directly.. As for security the default behavior allows all people to use the trust. You can block this when you create the trust if required.. This is the link that will give you more information..

http://technet2.microsoft.com/windowsserver/en/library/15dfdd7f-3a7f-4d6f-a2b0-569462fb44321033.mspx?mfr=true

Hope this helps

mahtab786_dbi

ASKER

I have no problem , if xyz.com will access resources in pqr.com. just i want to be confirm that after creating the trust between abc.com and pqr.com, there will be no harm between abc.com and xyz.com .

DocCan11

no harm at all..

mahtab786_dbi

ASKER

Hi everyone, first of all thanx as i have created trust between abc.com and pqr.com and also working . but in event viewer of abc.com DC one warning event is

Event Type: Warning
Event Source: LsaSrv
Event ID: 32772
Description:
The interdomain trust account for the domain xyz.com could not be created.
The return code is the data.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

As far as I can see there's nothing wrong with the trust between abc.com and xyz.com. Replication goes well.
Except this event keeps nagging at me....
Any ideas on this would be highly appreciated.

ASKER CERTIFIED SOLUTION

DocCan11

membership

Create a free account to see this answer

Signing up is free and takes 30 seconds. No credit card required.

See answer