Re: Easy question on External Trust Perimeter-->Internal
- From: "Marlon Brown" <nomail@xxxxxxxxx>
- Date: Fri, 9 Dec 2005 10:13:30 -0800
Ah. That's what I wanted to confirm ! Thanks.
Regarding the firewall rules info in the link below, in my case it is a
one-way trust.
Do you have a good document there which shows which way I should apply such
rules ?
I mean, I know that some ports should remain 'open' to allow the one-way
trust to operate. I believe that some ports should be allowed only during
the trust establishment, but should be closed afterwards. In my case it is
an 'external' trust (perimeter trusts internal domain).
Thanks !
MB
"Manish" <Manish@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1FE515F4-CFD8-48E0-B6DE-A9E37C399700@xxxxxxxxxxxxxxxx
> Hi,
>
> Did you create secondary zone of your domains in eachother's DNS?
> As in, you need to have a secondary zone of perimeter.mycompany.com in the
> DNS of internal.mycompany.com and vice versa. That will enable name
> resolution between both your domains.
>
> For further info, ,check:
> http://support.microsoft.com/default.aspx?scid=kb;en-us;179442
>
> --
> Microsoft Support Engineer
> Microsoft Windows 2000/2003 Active Directory Services Specialist
>
>
> "Marlon Brown" wrote:
>
>> I have a Win2003 domain named "internal.mycompany.com".
>> Now I added a NIC onto my ISA 2004 server and I created a
>> "perimeter.mycompany.com" domain (I also setup DNS-ADI servers
>> authoritative
>> for the new perimeter.mycompany.com. I mean, the DNS servers on the
>> perimeter.mycompany.com are totally independent from the
>> internal.mycompany.com DNS servers.
>>
>> From the perimeter-DCs, I can ping my internal DNS servers - connectivity
>> is
>> OK. Vice versa is also OK.
>>
>> Now I want to establish a one-way trust between the
>> 'perimeter.mycompany.com' and 'internal.mycompany.com'. I already allowed
>> Kerberos, LDAP and other ports necessary to establish a trust.
>>
>> I logon onto the perimeter-DC, I launch "Active Directory Domain and
>> Trusts".
>> I can see only the domain "perimeter.mycompany.com".
>> What do I need to do in order to 'see' the domain internal.mycompany.com
>> ?
>> I followed the steps on
>> http://technet2.microsoft.com/WindowsServer/en/Library/2dcc40a8-1781-427a-b806-ea10d16ffac81033.mspx
>> and I can't see how I would address this issue.
>>
>>
>>
.
- Follow-Ups:
- Re: Easy question on External Trust Perimeter-->Internal
- From: Ace Fekay [MVP]
- Re: Easy question on External Trust Perimeter-->Internal
- References:
- Easy question on External Trust Perimeter-->Internal
- From: Marlon Brown
- Easy question on External Trust Perimeter-->Internal
- Prev by Date: Re: Active Directory replication over firewall
- Next by Date: Re: AD modes
- Previous by thread: Easy question on External Trust Perimeter-->Internal
- Next by thread: Re: Easy question on External Trust Perimeter-->Internal
- Index(es):
Relevant Pages
|
