Unable to create external trust between two different domain

-

hi,

there  a requirement have 2 domains. dev.com production domain controller , oim.com used development test.user in oim.com need access resources dev.com , dev.com users must not able access resources oim. com ! domain controller in oim.com crashed few days , there had 1 domain controller in oim. hence have re imaged dc ad promoted server dc again , trying reconfigure external trust between oim.com ad dev.com

oim.com has 1 dc - windows 2012 r2 ( functional level - windows 2008r2)

dev.com has multiple dc - windows 2008 r2 ( functional level - windows server 2003)

i have created 1 way outgoing trust oim.com dev.com , when validate trust oim.com trust validate successfully. when validate trust dev.com getting error " windows cannot find active directory domain controller oim.com.vreify addc available , try again.

i able ping domain controller both domain vice versa , have created conditional forwarder in oim.com dev.com , added respective dns ips. in dev.com domain controller have added dns ip address of oim.com in network properties. added host records too.

also when tried creating trust dev.com getting 2 option ( realm trust , trust windows domain ) , oim.com when try creating trust able options external trust, type of trust etc.

can suggest how fix issue ?


hello,

also in dev.com domain controller have added dns ip address of oim.com in network properties: do not add ip of 'oim' dns server on 'dev' domain controller. won't work, unless it's designed way, , don't think that's case.

__

also added host records too:

adding records dns server in 'dev' forward lookup zone, belonging to domain won't work.

__

either use delegation, or create conditional forwarder on 'dev' dns servers, oim.com

__

also when tried creating trust dev.com getting 2 option ( realm trust , trust windows domain: that caused fact domain controller cannot lookup , verify 'oim.com'.

/\

best regards,

jesper vindum, denmark

systems administrator

help forum: monitor(alert) threads , vote helpful replies or mark them answer, if helps solving problem.



Windows Server  >  Directory Services



Comments

Post a Comment

Popular posts from this blog

Cannot access Anywhere Access using domain name?

-
after installing anywhere access in windows server 2012 essentials r2, cannot use anywhere access using setup domain name in wizard such remote.mydomain.com? if enter public ip address, example, 72.2.34.5 works. before set anywhere access, created a record pointing public address...pinged , worked...so not sure doing wrong?  is wizard supposed create record etc , make remote.mydomain.com work? if enter public ip address while on lan, takes me router webpage.  shouldn't work on lan if accessed via public ip? thank you, tim. the wizard can configure remote.microsoft_names.com  remote.remotewebaccess.com but cannot configure domains purchased outside wizard.  depends on how domain configured if wildcard.yourdomain.com should work  if try ping remote.your_domain.com afar , not give proper  public ip, need add record mariette said. much have record domain.com www.domain.com , if have website somewhere else www.domain.com , need re...
Read more

server manager error: ADAM.events.xml could not be enumerated.

-
firewall off isnt it. rerun ldap wizard:?  why?  will screw exchange server running on machine?  ldap wizard asks questions don't understand. please dont send generic links to: http://social.technet.microsoft.com/wiki/contents/articles/13444.windows-server-2012-server-manager-troubleshooting-guide-part-ii-troubleshoot-manageability-status-errors-in-server-manager.aspx thanks, john hi john, >> ok. server manager app. these questions refer this. nothing else 2.  do need create app dir or not?  this server manager, shouldnt done? (why did break in first place?) how check if app dir exists server manager or not. 3.  if "lightweight" implementation of anything, sure hate see "heavyweight" version. the waring events can't enumerated. , cause not completing configuration of ad lds. ad lds not related server manager. used provide flexible support directory-enabled applications. if not implementing such application...
Read more

send messages to users

-
i have domain server windows 2000 sp4. my clients using win xp , win 98. when send messages computer management-shared folders-rightclick-all task-send message connected users, message received clients using winxp but not in  win 98 .how send them without winpopup  , net meeting. this forum windows server 2008.   check messenger service running on win98-clients. (haven't seen win 98 in while might not available...) Windows Server  >  Directory Services
Read more