Re: creating one way trust

Tech-Archive recommends: Fix windows errors by optimizing your registry



Hi
I will not "stress" the conversation with one more opinion, I'll wait and hope that everything goes ok based on the help that you're getting from others, just keep in mind the basic stuff, DNS must be properly setup, if FWs active between the Forests you must open the proper ports, after this, everything should run ok. Remember this is very easy thing to do (although does not sound with all these recommendations:) ).
--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services
"dkblee" <dkblee@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:8DF3CC46-5B73-47EF-90F4-DDC78BAC9B82@xxxxxxxxxxxxxxxx


"Jorge Silva" wrote:

Okay,
Let me try to understan a little more about youre network.

How DNS servers are configured to resolve eachother FQDN? Did you setup
Secondary Zones, Stub Zones, Forwarding, Conditional Forwarding???
hi! I'm not too sure about this, but i did a nslookup, i;m able to resolve
the fqdn at my side and the headoffice. I've asked my headoffice to check on
this but has not get back to me. What would be the recommendation?

You say that the other trust is in a different network, correct?
Assuming FW between them, download and run "portqueryui.exe" or the command
line version of this tool to test the connectivity between both forests. If
There isn't any firewall in between except the win2003svr built in firewall.




--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services
"dkblee" <dkblee@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B3BA65A9-8033-48C8-801C-5E6009E27B55@xxxxxxxxxxxxxxxx
> hi! i did not turn on the firewall. there are 3 DCs in my domain and > those
> are in the same network (the other external domain that i'm creating > the
> trust is in different network). Yes i can resolve the dns name.
>
> "Jorge Silva" wrote:
>
>> Hi
>> - Windows Server 2003 has the FW disabled by default, did you enabled >> it?
>> If
>> no, do you have any FW between them?
>>
>> - What type of trust are you configuring?
>> - How many DCs and are in the same network?
>> - Can you resolve eachother FQDN?
>>
>> -- >> I hope that the information above helps you.
>> Have a Nice day.
>>
>> Jorge Silva
>> MVP Directory Services
>> "dkblee" <dkblee@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:93122C0D-190D-4B58-ABFB-30C13DA4EEFC@xxxxxxxxxxxxxxxx
>> > hi! I'm testing on a one way trust between 2 different domain. When
>> > configuring that, i got the message the domain can't be contacted. >> > The
>> > DC
>> > is
>> > running on win2003svr stdn r2. Is there any port that i need to open >> > in
>> > the
>> > winsvr firewall?
>> >
>> > Will there be any different in configuring this one way trust
>> > relationship
>> > between 2 domains in a same forest and 2 domains from 2 seperate
>> > forest?
>> > what
>> > will be the different? can explain? Thks.
>>


.



Relevant Pages

  • Re: creating one way trust
    ... It sounds for me that you do not need/have a trust, it sounds that you have 2 domain controllers in the same domain? ... So please clarify the current setup and we can go to the future planning of your network. ... svr by configuring one of my current dc as a spare global cataloque. ... Once everything is replicated from the win2k svr. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Another LAN problem
    ... I do have an Eicon Diva ADSL Router, configuring its ... firewall is worse than configuring this network. ...
    (microsoft.public.windowsxp.network_web)
  • Re: creating one way trust
    ... 2)domain naming master ... configuring one of my current dc as a spare global cataloque. ... Let me try to understan a little more about youre network. ... You say that the other trust is in a different network, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Applying your Settings...
    ... on the workstation without configuring it to ... If you are running a non-Microsoft firewall, ... Disconnect the PC from the network, restart it, then disable the ...
    (microsoft.public.windows.server.sbs)
  • Re: creating one way trust
    ... Let me try to understan a little more about youre network. ... How DNS servers are configured to resolve eachother FQDN? ... You say that the other trust is in a different network, ... > configuring that, i got the message the domain can't be contacted. ...
    (microsoft.public.windows.server.active_directory)