Re: Trust Relationships

From: Shilpa Sinha [MSFT] (v-shilsi_at_online.microsoft.com)
Date: 06/17/04


Date: Thu, 17 Jun 2004 02:00:09 GMT

Hi

Maybe this will help:

Reference Link:
http://support.microsoft.com/default.aspx?scid=kb;en-us;312003&Product=win20
00

Unable to Establish an Explicit Trust Between Windows 2000-Based Domains

SYMPTOMS
========
When you attempt to establish an explicit trust between two Windows
2000-based domains that are in different forests, you may receive the
following error message:

The DomainName domain cannot be contacted. If this domain is a Windows
domain, the trust cannot be set up until the domain is contacted. Click
Cancel and try again later. If this is an interoperable non-Windows
Kerberos realm and you want to set up this side of the trust, click OK.

CAUSE
=====
This issue can occur if the domain controller where the trust is being
configured cannot resolve the IP address of the primary domain controller
(PDC) in the other domain.

RESOLUTION
==========
To resolve this issue, make sure that Windows Internet Name Service (WINS),
Domain Name System (DNS), or the LMHOSTS file is configured correctly to
locate the PDC, and that TCP/IP is configured correctly on all of the
domain controllers that are involved.

MORE INFORMATION
================
For additional information about DNS, click the article numbers below to
view the articles in the Microsoft Knowledge Base:

        291382 Frequently Asked Questions About Windows 2000 DNS
        237675 Setting Up the Domain Name System for Active Directory

For additional information about the LMHOSTS file, click the article
numbers below to view the articles in the Microsoft Knowledge Base:

        101927 The Lmhosts File for TCP/IP in Windows
        180094 How to Write an LMHOSTS File for Domain Validation

For more information about WINS, type WINS on the Search tab in Windows
2000 Help, and then click the appropriate topic.

For more information about configuring TCP/IP, type TCP/IP on the Search
tab in Windows 2000 Help, click Configure TCP/IP, and then click the
appropriate topic.

The information in this article applies to:
        o Microsoft Windows 2000 Server

Shilpa Sinha
This posting is provided "AS IS" with no warranties, and confers no rights.



Relevant Pages

  • RE: Trust Domain from W2k3 to W2k
    ... How to establish trusts with a Windows NT-based domain in Windows Server ... add the name on the correct box on the Trust Tab. ... Please reconfirm the computer account was enabled. ... The DNS suffix of the computer name of a new domain controller may not ...
    (microsoft.public.windows.server.migration)
  • RE: How to create trust relationship between Windows 2003 Server (domain controler) and Windows NT 4
    ... relationship between windows NT and Windows 2003 by following the ... Establish Trusts with a Windows NT-Based Domain in Windows Server ... How to Create a Trust Relationship ... Create a Two-Way Trust Relationship ...
    (microsoft.public.win2000.security)
  • Re: How to connect the NT4 PCD from windows 2003 server
    ... the NT domain and in the properties of the trust for incoming and outgoing ... I would also go into Domain Controller Security ... When you create lmhosts file make sure ... You can also use nbtstat -c on the Windows ...
    (microsoft.public.win2000.security)
  • 2003 to NT Domain Trust not working.
    ... the Windows 2000 domain. ... PDC tries to create a trust. ... The domain contains an NT Server 4.0 PDC, ... dom2K domain controllers. ...
    (microsoft.public.win2000.networking)
  • Problem with domain trust after W2003SP1 upgrade
    ... I just upgraded the server on my domain with Windows 2003 SP1 and I'm ... experiencing problems with trust relationships. ... When recreating it from the cc.local domain controller it tells me: ... This computer was not able to set up a secure session with a domain ...
    (microsoft.public.windows.server.security)