CREATING A TRUST ON WINDOWS SERVER 2012


TRUST ON WINDOWS SERVER 2012


1. Tried to create a secondary zone on both sides, failed loading zone from master

2. Tried to create a trust (realalm and forest) , on both sides, but it fail validation, no logon servers available


Firewall a pass-all rule on bothe servers

vss-ptAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

mmichaCommented:
You need to configure conditional forwarding on the DNS on each side of the trust so they can locate AD in the remote Active Directory.
0
vss-ptAuthor Commented:
I Just create a condition forwarding?
No need for a secondary zone?
0
mmichaCommented:
Right...

If domain A is called domainA.local and domain B is called domainB.local, you'd do the following:

In domain A, create conditional forwarding to domain B, and enter it's DNS servers.
In domain B, create conditional forwarding to domain A, and enter it's DNS servers.

I'm assuming routing is okay between the two networks already for this to work.
0
Newly released Acronis True Image 2019

In announcing the release of the 15th Anniversary Edition of Acronis True Image 2019, the company revealed that its artificial intelligence-based anti-ransomware technology – stopped more than 200,000 ransomware attacks on 150,000 customers last year.

vss-ptAuthor Commented:
Thanks, Now I'm going somewere !!

Step to also with no problema. I created the forest trust on Domain A for both domains.

On Domain A I can see the 'all users' shares from domain B. But how do I Grant a share to a user of domain A on domain B?
0
mmichaCommented:
Just because a trust exists, you still have to deal with permissions.  So for users in each domain to access something like file shares you would have to create the appropriate groups and nest them in the other domain, etc to provide access.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
vss-ptAuthor Commented:
I will open another thread. I can´t see domain A user on domain B to deal with permition
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.