Re: Trust between two Forests Fail

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: "Herb Martin" <news@xxxxxxxxxxxxxx>
Date: Mon, 26 Feb 2007 17:08:11 -0600

"John Kolodziejski" <JohnKolodziejski@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:5A5AC777-BB2F-41DC-A17C-6DC89A0F720A@xxxxxxxxxxxxxxxx

Ok, we have an answer.

once WINs was corrected, both sides could see each other, but Company was
being challenged by a log on box every time they tried to create or verify
the trust.

After deep research of the SMB signing, we saw that both servers need Reg
Key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters\

needed to match on both servers on both sides of the trust.

How did they get set differently or different from the defaults?

Most domains don't need this explicit setting?

.

References:
- RE: Trust between two Forests Fail
  - From: John Kolodziejski

Prev by Date: Re: two subnets on one network
Next by Date: Re: Automatic workstation domain registration w/ new AD server?
Previous by thread: RE: Trust between two Forests Fail
Next by thread: Remote AD Site
Index(es):
- Date
- Thread

Relevant Pages

Re: Active Directory Restructure Question
... If you are building a new forest you can use the Active Directory ... To start would have to establish dns connectivity both ways, ... Once established you can then go and create your external trust, ... domains for your UNIX/LINUX servers, ...
(microsoft.public.windows.server.active_directory)
Re: network replacement
... It sounds much more convoluted once the whoel details are provided. ... I would go with a new domain and setup a trust and migrate using ADMT. ... as servers with a trust between the two. ... same logins; ...
(microsoft.public.windows.server.active_directory)
Re: Active Directory Restructure Question
... If you are building a new forest you can use the Active Directory Migration ... To start would have to establish dns connectivity both ways, ... Once established you can then go and create your external trust, ... domains for your UNIX/LINUX servers, ...
(microsoft.public.windows.server.active_directory)
Re: DNS-One Way Trust-questions....
... If this is not the same forest (which is implied by a one-way trust since ... NETBIOS name resolution to work. ... Unless you are on a SINGLE subnet you will need WINS servers ...
(microsoft.public.win2000.dns)
Re: DNS-One Way Trust-questions....
... If this is not the same forest (which is implied by a one-way trust since ... NETBIOS name resolution to work. ... Unless you are on a SINGLE subnet you will need WINS servers ...
(microsoft.public.win2000.dns)