Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

How do I create a trust between 2 Domains on different subnets?

Posted on 2009-05-12
2
Medium Priority
?
209 Views
Last Modified: 2012-05-06
I want to create a trust between 2 Domains so I can migrate over, Settings,etc, servers from Domain B to Domain A

Domain A is on the local network
Domain B is on the DMZ, but I can access the DMZ through the DNS/DC and all the servers are pingable.

How can I create a trust between both domains so I can do what I need to do?

0
Comment
Question by:eallerton
2 Comments
 
LVL 16

Accepted Solution

by:
speshalyst earned 2000 total points
ID: 24367164
This should help you get started..
http://www.neowin.net/forum/index.php?showtopic=602764
 
0
 
LVL 18

Expert Comment

by:Americom
ID: 24374225
In your scenario:
DOMAINB trusts DomainA
      
DomainA         
Run Active Directory Domains and Trusts->Right Click on the Domain  and select Properties Then click the "Trusts" tab. Then click on New Trust. Provide DNS or NetBIOS name of other domain(DomainB). Here you need an "incoming trusts". If no other specific restriction, do forest trust. When done, you should have DomainB listed on the bottom box of the "Domains that trust this domain(incoming trusts)"

DomainB.
Do the same but the opposite of the above.

If you run into any problem or better yet, confirm if your firewall ports are opened since DomainB is in the DMZ:
These are the ports and protocol require to open on both side of the firewall if trust is to be established between two domains:

UDP      135, 389, 53, 88, 445, (for NetBIOS: 137, 138)
TCP       135, 389, 636, 53, 88, 445, 1024-65535, (for NetBIOS: 139, 42)
ICMP      Dependency of port 139, also used by Windows Redirectors, Group Policy, MTU etc


Service Name             UDP       TCP
LDAP                   389       389
LDAP SSL             N/A       636
RPC Endpoint Mapper       135       135
Global Catalog LDAP       N/A       3268
Global Catalog LDAP SSL N/A       3269
Kerberos             88       88
0

Featured Post

Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

High user turnover can cause old/redundant user data to consume valuable space. UserResourceCleanup was developed to address this by automatically deleting user folders when the user account is deleted.
It’s time for spooky stories and consuming way too much sugar, including the many treats we’ve whipped for you in the world of tech. Check it out!
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question