Re: Cannot validate trust - 2 forests

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi
adding to Pauls response can you post here the results for ipconfig /all

--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator

"Fred Flintstone" <idontthinkso@xxxxxxxxxx> wrote in message
news:eobbg2de44fpkgu7besiimpsiomdh0md1u@xxxxxxxxxx
">How is DNS configured? "

abc.com runs its own primary. It also runs secondary for xyz.com
xyz.com runs its own primary. It's also runs secondary for abc.com.

I can ping abc.com from xyz.com and vice verca. A workstation can
join either domain. Yet abc.com keeps saying it can't find a domain
controller for xyz.com despite it showing up in Network places and the
fact that each domain is a secondary DNS provider for the other.

">Because the clients are looking for DNS SRV RRs."

Both DNS servers are fully populated with each other's records,
including the SRV records. They both have zone transfers enabled to
any host and have each other included as forwarders.

What else could be missing?
Thanks!



On Mon, 11 Sep 2006 19:12:59 +0100, "Paul Williams [MVP]"
<ptw2001@xxxxxxxxxxx> wrote:

If I can see xyz.com fom abc.com, why does it tell me it can't find a
domain controller?

Because the clients are looking for DNS SRV RRs. "See" could be a number
of
things. Most probably a result of NetBIOS broadcasts.

How is DNS configured? You've a couple of choices, I'll summarise some:

-- Use conditional forwarding on both sides, e.g. xyz.com forwards abc.com
DNS traffic to abc.com DNS and vice versa.
-- Use stub zones or secondary zones.


Those are the main ways. There's some choices based on load, etc. In
smaller environments, or for environments with different sets of service
administrators, conditonal forwarding is often the most troublefree.



.

Relevant Pages

  • Re: What is the DID Size increase for an AD Stub zone
    ... DNS with AD Integrated primary zones for both domains in the forest as well ... DNS servers which has conditional forwarding set for several disjoined ... Since we have over 100 DC/DNS servers I had preferred to use AD STUB zones ...
    (microsoft.public.windows.server.dns)
  • Re: troubles logging in to domain - on account does, the other doesnt
    ... Good Luck ... Systems Administrator ... Connection-specific DNS Suffix. ... I have two profiles created on AD. Person1 and Person2. ...
    (microsoft.public.windows.server.active_directory)
  • Re: DependOnService to DNS does not work 2003R2
    ... Systems Administrator ... Exchange functionality and is not supported. ... Server for Exchange, ISA, DC, SQL and they would need seperate licenses ... how it sould be possible to install an AD-Backup on an server when DNS ...
    (microsoft.public.windows.server.dns)
  • Re: Authenticated Users in DNS
    ... I hop that helps ... Good Luck ... Systems Administrator ... but they can create any DNS record via the DNS console on their desktop. ...
    (microsoft.public.windows.server.active_directory)
  • Re: PC pointing to DC in other locations
    ... Systems Administrator ... The DNS configuration is also important: ... -Make sure that you configure the Preferred DNS server in TCP/IP ... DNS client does not utilize each of the DNS servers listed in TCP/IP ...
    (microsoft.public.windows.server.active_directory)