Solved

Problem with trust between domains

Posted on 2014-02-21
3
1,305 Views
Last Modified: 2014-03-21
I have a Windows 2012 standard server and one windows 2008 server running on vSphere ESXi 5.1
Both are domain controllers in different domains.
I have set up a trust relationship between the 2 domains.
This seems to work just fine, but now and then the trust disappear on one side.
If I open "Domains and trusts" on both DCs, I see that the trust is valid on one DC, but on the other DC its gone.
It does not help to reboot the 2 DCs.

To fix the problem, I have to remove the remaining side of the trust...and then re-establish a new trust. Then it works again.

Some times the trust is there for one month.....sometimes its gone after a week.
What is happening.
0
Comment
Question by:stebyshe
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 41

Expert Comment

by:Adam Brown
ID: 39877593
Are these domains in the same forest or are they different forests? Do you have a DNS forwarder set up to communicate with the other domain controller (on both sides of the trust)?
0
 
LVL 37

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39879700
Are both servers in same VLAN or different VLANs in ESX?

If both servers are in different VLANs, then ensure that ports are not getting blocked intermittently, otherwise it will create problem

Also more importantly how both domains communicate to each other ?

If you have created primary AD integrated zones of one domain in another manually pointing to its name server, it is likely the cause of breaking the trust

DNS simple forwarder will not help, it will forward all unresolved queries to opposite domain which is not required
You must need either DNS conditional forwarder or secondary zone in order to work it properly in both domains vice versa

Also after creating trust just validate trust from both sides

Mahesh
0
 
LVL 15

Expert Comment

by:Rob Stone
ID: 39889338
Are there any warnings/errors on either DC in Eventviewer that may relate to the trust?

When it next happens run NLTEST /Trusted_Domains to query the trusted domains via CLI on both DC's.
0

Featured Post

Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows the method of using the Resultant Set of Policy Tool to locate Group Policy that applies a particular setting.
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question