hidden hit counter
Help!

Domain Trust

 
  

Post new topic   General Reply to Topic (not reply to a specific post)    Forums Home -> Domain RSS
Next:  WINS problem  
Author Message
Andy White
External


Since: Mar 07, 2007
Posts: 4



PostPosted: Thu Apr 19, 2007 4:36 pm    Post subject: Domain Trust
Archived from groups: microsoft>public>windowsnt>domain (more info?)

Sorry if this has been posted in the wrong group, not sure which group to
put it in.

We are trying to create a one way domain trust with one of our other
companies and I'm having a problem with it. we are using an NT4 pdc from our
domain and a W2K3 PDCe in the other domain. We want to give them access to
some files in our domain and as understand it that means our domain
(domain1) is the resource domain and theirs is the master domain (domain2)

when I use nltest /sc_query:domain2 from the pdc in domain1 I keep getting
"1787 ERROR_NO_SAM_TRUST_ACCOUNT."

When I try to create the trust I always get that "the trust relationship
between the primary domain and the trusted domain failed" error message.

I'm missing something that will make it all hang together but I don't know
what

I have read and followed the following KB articles but to no avail:-

175025
158148
228477
102725
180099
830578
181171
178640
180094
325874
150800
889030
185786
150737
139380
168076

I know some of these are not relevant to the problem but it lets you know
the kind of info I have been looking at to resolve the problem

Thanks in advance for any help
Back to top
Mariusz Kruk
External


Since: Jul 25, 2006
Posts: 4



PostPosted: Thu Apr 19, 2007 6:01 pm    Post subject: Re: Domain Trust [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

epsilon$ while read LINE; do echo ">$LINE"; done < Andy White
>When I try to create the trust I always get that "the trust relationship
>between the primary domain and the trusted domain failed" error message.

First and I think most important thing is the mutual visibility of the
two domains. I had recently same problem and ended with adding
apropriate entries to lmhosts on the W2k3 DC's.
You probably need visibility other way too, so you must make sure you
can resolve your W2k3 DC's names from NT4 DC. Whether you do it by setting
up the W2k3 domain DNS servers as your DNS servers in NT4 connection
properties or by some other means (probably delegating apropriate
domains from your DNS servers in the NT4 domain (if you have any)) is of
secondary importance.

HTH
(of course, I assume you have administrative powers in both domains and
the packets are not getting filtered out anywhere in between)
--
/\-\/\-\/\-\/\-\/\-\/\-\/\ THE PRESIDENT DID IT, IS NOT AN EXCUSE(Bart
\ Kruk.RemoveThis@epsilon.eu.org / Simpson on chalkboard in episode AABF05)
/ http://epsilon.eu.org/ \
\/-/\/-/\/-/\/-/\/-/\/-/\/
Back to top
Display posts from previous:   
Post new topic   General Reply to Topic (not reply to a specific post)    Forums Home -> Domain All times are: Eastern Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum