Trust Relationship

I'm running windows server 2003 and trying to create a two-way external
trust to another domain.

I'm able to get almost all the way through the trust creation wizard, I even
make it right up to the completing the trust page, but I receive this error:

The trust relationship cannot be created because the following error
occurred. The operation failed. The error is:
The domain was in the wrong state to perform the security operation.

Can anyone help?

Thanks

elirtaiAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

dinsjCommented:
Have you made a conditional forwarder in DNS
0
naldiianCommented:
What domain funcitonal level is each domain in? That error is usually related to trying to use a feature or option on the Trust configuration that is not supported by one of the domains, such as trying to use selective authentication when one of the domains involved doesnt support that feature.
Were you choosing the Selective Authentication choice in the wizard?
0
AwinishCommented:
The dns has to be configured before actually creating trust,the dns can be forwarder,standard zone or other.
Just verify fro below link.
http://social.technet.microsoft.com/wiki/contents/articles/managing-trusts.aspx 
0
elirtaiAuthor Commented:
DINSJ, Yes, we have conditional forwarder.

NALDIIAN, yes, I try to use selective authentication and there is one Windows NT DC.

Is it possible that the administrator groups get renamed as a result of using full authentication in a trust between different language domains? are there any known problems related to full authentication between different languages or different AD versions?
0
naldiianCommented:
You cannot use Selective Authentication unless the domains involved are 2003 Domain Functional Level. It requires a feature that is not supported anything prior to 2003 DCs.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.