Alex Bolla
asked on
Two Way Trusts
I have two domains. a.local and b.local. They are separate domains and forests. I need to create a trust between the two domains. They are both 2003 domains. I am migrating b into a, so I will probably need to create a new site in the a domain. Can someone please give me some guidance on how to do this and in what order? Thanks.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Also, if security is not a concen between these two forests(networks), then you can have your firewall wide open otherwise, you need these ports and protocol opened before creating the trust:
These are the ports and protocol require to open on both side of the firewall if trust is to be established between two domains:
UDP 135, 389, 53, 88, 445, (for NetBIOS: 137, 138)
TCP 135, 389, 636, 53, 88, 445, 1024-65535, (for NetBIOS: 139, 42)
ICMP Dependency of port 139, also used by Windows Redirectors, Group Policy, MTU etc
Service Name UDP TCP
LDAP 389 389
LDAP SSL N/A 636
RPC Endpoint Mapper 135 135
Global Catalog LDAP N/A 3268
Global Catalog LDAP SSL N/A 3269
Kerberos 88 88
These are the ports and protocol require to open on both side of the firewall if trust is to be established between two domains:
UDP 135, 389, 53, 88, 445, (for NetBIOS: 137, 138)
TCP 135, 389, 636, 53, 88, 445, 1024-65535, (for NetBIOS: 139, 42)
ICMP Dependency of port 139, also used by Windows Redirectors, Group Policy, MTU etc
Service Name UDP TCP
LDAP 389 389
LDAP SSL N/A 636
RPC Endpoint Mapper 135 135
Global Catalog LDAP N/A 3268
Global Catalog LDAP SSL N/A 3269
Kerberos 88 88
BTW, one thing you must verify before creating the trust is to make sure DNS name resolution is working from the domain controllers between the two domains in the forests.
http://technet.microsoft.com/en-us/library/cc740018(WS.10).aspx
Did you want a two way, one way, domain wide or forest wide trust?