Solved

Problem with trust between domains

Posted on 2014-02-21
3
1,236 Views
Last Modified: 2014-03-21
I have a Windows 2012 standard server and one windows 2008 server running on vSphere ESXi 5.1
Both are domain controllers in different domains.
I have set up a trust relationship between the 2 domains.
This seems to work just fine, but now and then the trust disappear on one side.
If I open "Domains and trusts" on both DCs, I see that the trust is valid on one DC, but on the other DC its gone.
It does not help to reboot the 2 DCs.

To fix the problem, I have to remove the remaining side of the trust...and then re-establish a new trust. Then it works again.

Some times the trust is there for one month.....sometimes its gone after a week.
What is happening.
0
Comment
Question by:stebyshe
3 Comments
 
LVL 40

Expert Comment

by:Adam Brown
ID: 39877593
Are these domains in the same forest or are they different forests? Do you have a DNS forwarder set up to communicate with the other domain controller (on both sides of the trust)?
0
 
LVL 37

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39879700
Are both servers in same VLAN or different VLANs in ESX?

If both servers are in different VLANs, then ensure that ports are not getting blocked intermittently, otherwise it will create problem

Also more importantly how both domains communicate to each other ?

If you have created primary AD integrated zones of one domain in another manually pointing to its name server, it is likely the cause of breaking the trust

DNS simple forwarder will not help, it will forward all unresolved queries to opposite domain which is not required
You must need either DNS conditional forwarder or secondary zone in order to work it properly in both domains vice versa

Also after creating trust just validate trust from both sides

Mahesh
0
 
LVL 15

Expert Comment

by:Rob Stone
ID: 39889338
Are there any warnings/errors on either DC in Eventviewer that may relate to the trust?

When it next happens run NLTEST /Trusted_Domains to query the trusted domains via CLI on both DC's.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
This tutorial will walk an individual through the process of configuring basic necessities in order to use the 2010 version of Data Protection Manager. These include storage, agents, and protection jobs. Launch Data Protection Manager from the deskt…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question