We help IT Professionals succeed at work.

Cannot ping mydomain.local from my other trusted side.

Castlewood
Castlewood asked
on
83 Views
Last Modified: 2015-02-09
I already cannot remember if it is caused by removal of WINS. Suddenly our two-way trust domains between two trees becomes broken. Well, as I can see from side A to side B seems still fine but from side B to side A is broken. As I can see, I from side B cannot ping side A's DomainA.local while I from side A can ping side B's DomainB.local. Question is, why from side B I cannot ping side A's DomainA.local? Is it a DNS issue ? or WINS issue? or others? Please help.
Comment
Watch Question

Will SzymkowskiSenior Solution Architect
CERTIFIED EXPERT
Most Valuable Expert 2015
Top Expert 2015

Commented:
Are you able to ping via IP to machines in the other domain You probably do not have the proper DNS Forwarders in place on your domain controllers pointing to the other domain. You need DNS servers from the other domain to be able to provide name resolution so what you need to do it add a Conditional forwarder in DNS for domain A to Domain B. In Domain B you will need Conditional forwarders to domain A.

When you query a machine from a forest that is not in your forest root domain it needs to query the other DNS servers in the other forest to get a reply back.

Another thing you can do is create a secondary zone for Domain A in Domain. You can then do the same for Domain B in Domain A. If you go this route you will need to add "Zone Transfers" for the other forest on each of the Zones you want to present as read only.

If you have all of this in place and it still doesn't work might be a firewall related issue.

Will.

Author

Commented:
In side A's DNS servers I am able to add side B's DNS servers as the Secondary Zone. However I am NOT able to do that in side B's DNS severs since I even cannot see any side A's DNS servers listed in the Browse list. I guess one of the two ways of Trust is broken. The problem is, shall I fix the DNS before rebuilding the Trust or the opposite? How?
In side B I can ping side A's servers/hosts without a problem but just not the side A's domain name which is called domainA.local, which signals the Trust becomes broken.
As far as why I cannot ping domainA.local from side B? (As mentioned I can ping domainB.local from side A.) That I really need help as it won't get resolved at all.  Do I need to manually add any records in DNS or WINS in order to make this ping working? Please help.
Will SzymkowskiSenior Solution Architect
CERTIFIED EXPERT
Most Valuable Expert 2015
Top Expert 2015

Commented:
On the DNS servers in DomainA did you add the DNS servers of DomainB to the Zone Transfers Tab? You cannot add Secondary Zones if you do not have Zone Transfers enable for the DNS server in the other domain.

Also why are you only using a 1 way trust and not 2 way? Are you trying to access resources in both domains?

Will.

Author

Commented:
Transfer in the tab has been enabled.
The Trust is a two-way. But one of them is broken. That is what I'm trying to figure out -- how to repair it?
Senior Solution Architect
CERTIFIED EXPERT
Most Valuable Expert 2015
Top Expert 2015
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.