Tree root trust - Access Denied

Hi all,

Building a new AD network I've setup a forest: alpha.forest and the tree root domain beta.local so all the users will log on to the domain 'beta'.

The automatic trust between them is only one way; if I validate the trust on Alpha it's fine.  If I validate the trust on Beta if fails with access denied.  I then log in with Alpha's admin credentials and I'm told it's all good.  I then retry the test and if fails again.

Can't see any errors in either event log at all.

Any advice most welcome.

Who is Participating?
Mike ThomasConnect With a Mentor ConsultantCommented:
"alpha.forest and the tree root domain beta.local"

Trust issues aside I do not quite understand what you have done? why build 2 forrests?

the whole point of having a forrest is that you can have a single security boundry with many domains.

so you should have a root domain

root.local then maybe a child domain called alpha which would be alpha.root.local or whatever.

looopsAuthor Commented:
It's not two forests, it's a child domain but we wanted it's own name for branding / locale reasons. ie wanted the users to log into 'beta'.
looopsAuthor Commented:
I rebuilt the AD ito a standard 1st Forest / Domain.

Thanks for the input.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.