Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1843
  • Last Modified:

Problem with trust between domains

I have a Windows 2012 standard server and one windows 2008 server running on vSphere ESXi 5.1
Both are domain controllers in different domains.
I have set up a trust relationship between the 2 domains.
This seems to work just fine, but now and then the trust disappear on one side.
If I open "Domains and trusts" on both DCs, I see that the trust is valid on one DC, but on the other DC its gone.
It does not help to reboot the 2 DCs.

To fix the problem, I have to remove the remaining side of the trust...and then re-establish a new trust. Then it works again.

Some times the trust is there for one month.....sometimes its gone after a week.
What is happening.
0
stebyshe
Asked:
stebyshe
1 Solution
 
Adam BrownSr Solutions ArchitectCommented:
Are these domains in the same forest or are they different forests? Do you have a DNS forwarder set up to communicate with the other domain controller (on both sides of the trust)?
0
 
MaheshArchitectCommented:
Are both servers in same VLAN or different VLANs in ESX?

If both servers are in different VLANs, then ensure that ports are not getting blocked intermittently, otherwise it will create problem

Also more importantly how both domains communicate to each other ?

If you have created primary AD integrated zones of one domain in another manually pointing to its name server, it is likely the cause of breaking the trust

DNS simple forwarder will not help, it will forward all unresolved queries to opposite domain which is not required
You must need either DNS conditional forwarder or secondary zone in order to work it properly in both domains vice versa

Also after creating trust just validate trust from both sides

Mahesh
0
 
Rob StoneCommented:
Are there any warnings/errors on either DC in Eventviewer that may relate to the trust?

When it next happens run NLTEST /Trusted_Domains to query the trusted domains via CLI on both DC's.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now