Solved

Unable to establish trust on 2K8 R2 functional domains due to DNS namespace overlapping at COOP

Posted on 2014-03-10
2
281 Views
Last Modified: 2014-03-10
I built a COOP site domain to work as a warm site.  Because this is a secure network I was forced to complete the site/domain configurations before I was able to connect the two sites.  My first site domain is work.site.com, and I wanted my backup site to be created as a new site, so I selected coop.work.site.com.  When I connected the sites I found that I created a DNS scenario where lookups from work.site.com are not forwarding to coop.work.site.com because it believes it is authoritative.  Lookups from coop.work.site.com do successfully find servers on work.site.com.  Now I am stuck with the domain migration becuase I cannot even establish a two way trust due to DNS failures.  

I will have a very hard time changing the structure of the domain namespace at the COOP due to the fact that certificates have been issued and our security posture has been approved, so major changes will be scrutinized.  I do have full control of the domain migration process and the DNS, AD, Trusts, and Sites.  

Have I engineered myself into a corner?  How do I configure the routing to begin my migration?
0
Comment
Question by:astrofizix
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 26

Accepted Solution

by:
DrDave242 earned 500 total points
ID: 39917885
It sounds like you need to create a delegation for the coop.work.site.com domain on the DNS servers for the work.site.com domain. Creating a delegation in 2008 R2 is quite simple: right-click in the work.site.com zone, select New Delegation, and follow the prompts in the wizard. More information is here if you need it.
0
 

Author Comment

by:astrofizix
ID: 39918513
Thank you DrDave, while I have not solved this issue yet, I have convinced myself that this is a DNS issue which can be resolved by configuring the namespaces on both DNS servers until they can fully see each other.  I created the Delegation, but it did not resolve my problems immediately, I think I have a few more configuration changes to make.
0

Featured Post

Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
Suggested Courses

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question