?
Solved

Trust 2008/2003 Domain

Posted on 2009-04-09
8
Medium Priority
?
338 Views
Last Modified: 2012-05-06
I have a 2008 domain and a sep. domain that is running 2003. the two sites are connected by a tunnel.  I want to create a 2 way trust between the domains.  Any  issues to look for?  Schema issues on the 2003?

thanks
0
Comment
Question by:jasonmichel
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
8 Comments
 
LVL 19

Expert Comment

by:jss1199
ID: 24110337
No issues encountered here and we have several 2008 <> 2003 trusts.  See the EE post below for a good walkthrough on creating the trust.

http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_23805633.html
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 24110379
Do you have name resolution working between the domains?  That will be important.
You can use conditional forwarders or use secondary zones (not one way to do it), but they do need to be able to resolve.
Thanks
Mike
0
 
LVL 1

Author Comment

by:jasonmichel
ID: 24110398
yeah i was just thinking about DNS...so i can just create a conditional forwarded just for the other domain..i currently have them pointed to opendns
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
LVL 57

Expert Comment

by:Mike Kline
ID: 24110425
Do you have DNS running in the domains?
 
0
 
LVL 1

Author Comment

by:jasonmichel
ID: 24110440
yes..both sides
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 2000 total points
ID: 24110511
ok then what you can do is
DomainA
Set conditional forwarding for domainb.com and point to those domain B DNS servers
and vice versa
Then you can test name resolution and an nltest
  • Nslookup targetDomainFQDN

  • nslookup
            set type=ns
             targetDomainFQDN
 
  • Nltest /dsgetdc: targetforestrootdomain.local
Any firewalls in the way?
Thanks
Mike
0
 
LVL 1

Author Comment

by:jasonmichel
ID: 24110546
well we have cisco routers on each end with an ipsec tunnel established
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 24110728
ok then hopefully no port blocks there,  these are the ports that need to talk if there was a firewall
http://support.microsoft.com/kb/179442
 
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
Compliance and data security require steps be taken to prevent unauthorized users from copying data.  Here's one method to prevent data theft via USB drives (and writable optical media).
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlleā€¦
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stopā€¦
Suggested Courses
Course of the Month9 days, 5 hours left to enroll

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question