Re: Trust windows 2k to windows 2k3



Hello Gonzo,

Is NetBIOS over TCP/IP enabled on the advanced settings on the WINS tab of the NICs?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Thanks,

I have configured a few users with WINS, and the DC's either side have
WINS enabled and the database has netbios names showing, however using
my network places still fails, am I missing somethig or should this
work now? I guess this isn't relying on the Trust at this point, but
purely WINS/netbios broadcasts?

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911d6cdf8cc11737496fb64@xxxxxxxxxxxxxxxxxxxxxxx

Hello Gonzo,

FOr WINS replication see:
http://technet.microsoft.com/en-us/library/cc783226(WS.10).aspx
And you are correct, your clients need the WINS ip address, either
with DHCP or fixed.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Thanks, I have installed WINS on our DC and one in the remote DC
and set them as replication partners, should this be enough to get
it working? I guess I will also have to set every PC to also use
this WINS server via DHCP?

Thanks

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911d6cd68cc1171de1a7f19@xxxxxxxxxxxxxxxxxxxxxxx

Hello Gonzo,

Browsing over subnets requires a WINS server, that's correct.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties,
and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
We don't use WINs eith (forgot to mention), is this something we
should need for my network places to work aswell?

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911d6ccf8cc116f1c4ec4a0@xxxxxxxxxxxxxxxxxxxxxxx

Hello Gonzo,

Having the trust running is the first step. Then you have
configure access to the ressources as for the domain users. See
here for more details:
http://technet.microsoft.com/en-us/library/cc772808(WS.10).aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties,
and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!!
http://www.blakjak.demon.co.uk/mul_crss.htm
Many thanks!

The Trust is now working fine and I can browse to servers once I
put in the AD creditials. The next problem I face is if I go on
to one of our server and then to "My Network Places" and slect
this remote domain it takes it's time then fails and says
"domain is not available. You might not have permission to this
network resource etc..."

Do I need to add my account to the remote domain somewhere?

Thanks

"Paul Bergson [MVP-DS]" <pbbergs@xxxxxxxxxxxxxx> wrote in
message news:uf7pmCrQKHA.4428@xxxxxxxxxxxxxxxxxxxxxxx

I have an article on how to do this, but for some reason my
website is down. I don't have access to the hardware until this
evening. Check out

http://www.pbbergs.com/windows/windows.htm
Under articles for a forest trust tomorrow or late this
evening.
It
will
walk you through step by step. There are some issues with WINS
registration, etc... that can trip you up.
--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009
http://www.pbbergs.com
Please no e-mails, any questions should be posted in the
NewsGroup
This posting is provided "AS IS" with no warranties, and
confers
no
rights.
"Gonzo" <andrewwhite@xxxxxxxxxxxxxx> wrote in message
news:OQ8uHsqQKHA.352@xxxxxxxxxxxxxxxxxxxxxxx
Thanks for those useful links. However I still get the same
issue and we don't have a firewall inbetween.

What does it look for to find a DC?

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in
message
news:6cb2911d6bac8cc10ce850ddf6f@xxxxxxxxxxxxxxxxxxxxxxx

Hello Gonzo,

See here about:
http://technet.microsoft.com/en-us/library/cc782142(WS.10).as
px http://technet.microsoft.com/en-us/library/cc754941.aspx

Any firewall running:
http://support.microsoft.com/kb/179442/
Best regards
Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no
warranties,
and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!!
http://www.blakjak.demon.co.uk/mul_crss.htm
Thanks for finding the time to help.

How would I create a conditional forwarder?

So far I have created a secondary zone on either side and
created a trust, it seems to validate outbound from my
Windows 2003 domain but when I conenct to the Windows 2000
DC and validate it says "windows cannot find a domain
controller for domain. Varify that a DC is available"

There are 3 DC either side, and all appear in DNS, what am I
doing wrong?

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in
message
news:6cb2911d6b828cc10c889e990b4@xxxxxxxxxxxxxxxxxxxxxxx

Hello Gonzo,

On the 2000 create a secondary zone, correct, on the 2003
you can use either secondaries, conditional forwarders or
stub zones.

http://technet.microsoft.com/en-us/library/bb727050.aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no
warranties,
and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!!
http://www.blakjak.demon.co.uk/mul_crss.htm
Hi,

Does anyone know where I can find documentation on how to
set up a trust between a Windows 2000 mixed mode domain to
a Windows 2003 native domain? I have been searching for a
while and failed. I used to have a link which was a step
by step guide showing how to setup the DNS on both sides
first etc, which I think was just creating secondary zones
point to each others zones.



.



Relevant Pages

  • Re: Multiple Access Denied
    ... Best regards ... Meinolf Weber ... Disclaimer: This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.win2000.active_directory)
  • Re: Azman BK
    ... Best regards ... Disclaimer: This posting is provided "AS IS" with no warranties, ... "Meinolf Weber" wrote: ...
    (microsoft.public.windows.server.active_directory)
  • Re: remotely add user to desktop RDP / remotely connect to "local security policies"
    ... Best regards ... Meinolf Weber ... Disclaimer: This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.windows.server.general)
  • Re: GPO Not Applying
    ... Best regards ... Meinolf Weber ... Disclaimer: This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Dcdiag error message on systemlog test
    ... Best regards ... Meinolf Weber ... Disclaimer: This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.windows.server.active_directory)