Non existent domain when doing an nslookup to second domain

Posted on 2010-08-19
Last Modified: 2012-05-10
I have recently build a new WIndows Forest/Domain with a single domain controller which is Windows Server 2003 SP2. I ran dcpromo to install AD on the box and allowed the wizard to create the DNS automatically.
When i look in DNS console i see under forward lookup zones - domain name, the _msdcs folder is greyed out, not sure why. Suppose this is the first issue.
 Everything else in DNS looks correct, dynamic updates are set to 'nonsecure and secure' and the name server is the name of my domain controller. The NS record for the domain controller is also present.
When i do an nslookup for the domain name, server or IP for the domain controller again it looks fine.

I have a second Windows Forest/Domain which has been establised for a few years now again all DCs in this domain are Windows server 2003. The purpose of building the new domain above is to establish a 2 way fully transitive forest trust between the two domains. Both forests exist on the same VLAN so there are no firewall rules in play here.
When i do an nslookup from the new domain to the old domain it all looks fine. It displays the IPs for all the DCs in the old domain and the fully qualified name of the old domain so again all looks good.
When i attempt an nslookup from the old domain to the new domain i get the error message 'cannot find the new domain: Non existent domain'. This is preventing me from establishing the trust.

Apologies if the above description is a little messy and all over the place. I don't know what else to try on this and would greatly appreciate any help.
Question by:NoelMCM
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33478630
So, you msdcs folder is grayed out? Do you have a zone? If not you need to delete the zone then recreate the zone.

LVL 59

Expert Comment

by:Darius Ghassem
ID: 33478698
Make sure there is a reverse lookup zone as well.

Author Comment

ID: 33478989
Yes i do have the zone. But didn't have the reverse lookup zone configured. I have configured that now, restarted the net logon service but doesn't seem to have made a difference. I have attached a screen shot of the DNS console.
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

LVL 59

Accepted Solution

Darius Ghassem earned 500 total points
ID: 33479051
Make sure you are DNS Forwarding to the other domain or create a secondary zone for each domain on the other DNS server

Author Comment

ID: 33479121
Apologies i should have mentioned that before. I have DNS forwarding configured in both Domains.
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33479247
Can you ping the domain name?

Author Comment

ID: 33479326
Just to help stop any confusion.
The old domain is called
The new domain is called

When i ping from a DC in the domain i get an error saying 'Ping could not find host Please check name and try again'.

When i ping from the DC in the domain i get a reply from one of the DCs in the domain which is what i would expect.

Expert Comment

ID: 33479849
Create a the secondary zone for in the SERVER004HO, and a secondary zone for in the other DNS Server, implement zone replication on each of the servers, and wait until the zones get fully replicated. Check with nslookup and then attempt to create the trusts. Make sure that your Domains are 2003 functional level and the forests are as well 2003 functional level. When creating the trust logon as a user that is member of the Enterprise Admins group in both forests (check the root Domain).
LVL 59

Expert Comment

by:Darius Ghassem
ID: 33480270
One your DNS forwarders are not setup properly or you can setup Secondary zones like I said here http:#a33479051

Author Comment

ID: 33482787
Firstly thank you both for your comments.

In the domain under the zone i have added the IP address of the DC in the domain as a zone transfer server.

Likewise in the domain under the zone i have added the IP addresses of the DCs in the domain as a zone transfer servers.

The result of which means i can now do an nslookup from both domains and i get the expected response which is great. Is this normal practise? or have i done this wrong?

When i go to establish the Trust from the PDC server in to i get an RPC server cannot be contacted in the domain. But i have been able to get around this by creating both sides of the Trust from the PDC server so the Trust has been established but i fear there is still an underline issue with this RPC error.

I will be adding an additional DC to the domain at some stage today so hopefully the RPC error won't appear when i attempt to add the new DC to an existing domain but i suspect i will.

I will award points for your help later today.

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question