Trust Relationship
I'm running windows server 2003 and trying to create a two-way external
trust to another domain.
I'm able to get almost all the way through the trust creation wizard, I even
make it right up to the completing the trust page, but I receive this error:
The trust relationship cannot be created because the following error
occurred. The operation failed. The error is:
The domain was in the wrong state to perform the security operation.
Can anyone help?
Thanks
trust to another domain.
I'm able to get almost all the way through the trust creation wizard, I even
make it right up to the completing the trust page, but I receive this error:
The trust relationship cannot be created because the following error
occurred. The operation failed. The error is:
The domain was in the wrong state to perform the security operation.
Can anyone help?
Thanks
dinsj
Have you made a conditional forwarder in DNS
What domain funcitonal level is each domain in? That error is usually related to trying to use a feature or option on the Trust configuration that is not supported by one of the domains, such as trying to use selective authentication when one of the domains involved doesnt support that feature.
Were you choosing the Selective Authentication choice in the wizard?
Were you choosing the Selective Authentication choice in the wizard?
The dns has to be configured before actually creating trust,the dns can be forwarder,standard zone or other.
Just verify fro below link.
http://social.technet.microsoft.com/wiki/contents/articles/managing-trusts.aspx
Just verify fro below link.
http://social.technet.microsoft.com/wiki/contents/articles/managing-trusts.aspx
ASKER
DINSJ, Yes, we have conditional forwarder.
NALDIIAN, yes, I try to use selective authentication and there is one Windows NT DC.
Is it possible that the administrator groups get renamed as a result of using full authentication in a trust between different language domains? are there any known problems related to full authentication between different languages or different AD versions?
NALDIIAN, yes, I try to use selective authentication and there is one Windows NT DC.
Is it possible that the administrator groups get renamed as a result of using full authentication in a trust between different language domains? are there any known problems related to full authentication between different languages or different AD versions?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.