Re: Windows 2003 DNS and Windows NT4

Hello,

Thank you for your reply!

To troubleshoot trust configuration issues between a Windows NT 4.0-based
domain and Active Directory, you must verify the correct configuration of
the following areas:

#Name resolution
# Security settings
# User rights
# Group membership for Microsoft Windows 2000 or Microsoft Windows Server
2003

For more detailed infomation please refer to the following article:

889030 Trust between a Windows NT domain and an Active Directory domain
cannot be established or it does not work as expected
http://support.microsoft.com/default.aspx?scid=kb;EN-US;889030

Hope the information helps.

Best Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
| From: "Van P N" <depuit@xxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.migration
| References: <TwkSf.133648$%13.50022@xxxxxxxxxxxxxxxxxxxxxxxx>
<VBBAsOYSGHA.236@xxxxxxxxxxxxxxxxxxxxx>
| Subject: Re: Windows 2003 DNS and Windows NT4
| Lines: 136
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| X-RFC2646: Format=Flowed; Original
| Message-ID: <SWDSf.137644$%13.4205@xxxxxxxxxxxxxxxxxxxxxxxx>
| Date: Fri, 17 Mar 2006 20:15:46 +0100
| NNTP-Posting-Host: 84.195.41.117
| X-Trace: blueberry.telenet-ops.be 1142623026 84.195.41.117 (Fri, 17 Mar
2006 20:17:06 CET)
| NNTP-Posting-Date: Fri, 17 Mar 2006 20:17:06 CET
| Path:
TK2MSFTNGXA03.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!news.glorb.com!hwmnpeer01.lga!hwmnpeer01.ams!hwmedia!news.highwinds-me
dia.com!nntp.telenet.be!blueberry.telenet-ops.be.POSTED!317c0a85!not-for-mai
l
| Xref: TK2MSFTNGXA03.phx.gbl
microsoft.public.windows.server.migration:22951
| X-Tomcat-NG: microsoft.public.windows.server.migration
|
| Thanks alot for the reply.
|
| I tried it out in a test environment. Now I encountered a strange problem
| with the trust relationship.
| Now what I originally wanted is an one way trust (WinNT trusts Windows
2003)
|
| So I checked if everything was in order concerning the name resolution (
| nbtstat -c on both servers)
| Seeing that everything was in order, I tried to create an one way trust.
| And it was here that I noticed something strange.
| I can create the following trusts:
| - one way where windows 2003 trusts Windows NT4
| - two way where they trust each other
|
| But I can't create an one way where NT trusts 2003 => Can't find primary
| domain controller ????
|
| Now is there an explanation for this because it doesn't sound logical to
me.
| If I can create a two way trust, I should be able to create a way one
either
| way.
|
|
| Someone who has a solution for this strange 'problem'
|
|
| "Jason Tan (MSFT)" <v-jasont@xxxxxxxxxxxxxxxxxxxx> schreef in bericht
| news:VBBAsOYSGHA.236@xxxxxxxxxxxxxxxxxxxxxxxx
| > Hello,
| >
| > Thanks for posting!
| >
| > Please see the answer below:
| >
| > | My question now is, can we get rid of the old DNS server and let the
| > | windows2003 be the DNS server for "domainNT.com" and his own domain
| > | "domain2003.com"?
| >
| > Yes, you can host the DNS server for "domain2003.com" and
"domainNT.com"
| > on
| > the Windows 2003 server. You may simply create a standard zone manually
on
| > the Windows 2003 DNS server for the "domainNT.com"
| >
| > And another question: is it possible to build a trustrelationship
between
| > the 2 domains (domainNT.com and domain2003.com) ?
| >
| > Yes, I can do it.
| >
| > Please refer to the following article for detailed information.
| >
| > 325874 How to establish trusts with a Windows NT-based domain in Windows
| > Server 2003
| > <http://support.microsoft.com/default.aspx?scid=kb;EN-US;325874>
| >
| > 814591 How To Install and Configure DNS Server in Windows Server 2003
| > http://support.microsoft.com/default.aspx?scid=kb;EN-US;814591
| >
| > 825036 Best practices for DNS client settings in Windows 2000 Server
and
| > in
| > Windows Server 2003
| > http://support.microsoft.com/default.aspx?scid=kb;EN-US;825036
| >
| > Hope the information helps. If there is anything that is unclear, please
| > feel free to let me know.
| >
| > Best Regards,
| >
| > Jason Tan
| >
| > Microsoft Online Partner Support
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| >
| > When responding to posts, please "Reply to Group" via your newsreader so
| > that others may learn and benefit from your issue.
| >
| > =====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| >
| >
| >
| > --------------------
| > | From: "Van P N" <depuit@xxxxxxxxxxx>
| > | Newsgroups: microsoft.public.windows.server.migration
| > | Subject: Re: Windows 2003 DNS and Windows NT4
| > | Lines: 23
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| > | X-RFC2646: Format=Flowed; Original
| > | Message-ID: <TwkSf.133648$%13.50022@xxxxxxxxxxxxxxxxxxxxxxxx>
| > | Date: Thu, 16 Mar 2006 22:12:20 +0100
| > | NNTP-Posting-Host: 84.195.41.117
| > | X-Trace: blueberry.telenet-ops.be 1142543539 84.195.41.117 (Thu, 16
Mar
| > 2006 22:12:19 CET)
| > | NNTP-Posting-Date: Thu, 16 Mar 2006 22:12:19 CET
| > | Path:
| >
TK2MSFTNGXA03.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!newsfe
| >
ed01.sul.t-online.de!t-online.de!news-in.ntli.net!newsrout1-win.ntli.net!new
| >
speer1-win.ntli.net!news-out.ntli.net!newsrout1-gui.ntli.net!ntli.net!hwmnpe
| >
er01.ams!hwmedia!news.highwinds-media.com!nntp.telenet.be!blueberry.telenet-
| > ops.be.POSTED!317c0a85!not-for-mail
| > | Xref: TK2MSFTNGXA03.phx.gbl
| > microsoft.public.windows.server.migration:22929
| > | X-Tomcat-NG: microsoft.public.windows.server.migration
| > |
| > | Hi, we have the following situation:
| > |
| > | 2 NT4 servers:
| > | - one with DNS
| > | - another as PDC with IIS (domainNT.com)
| > |
| > | This PDC is only used for windows authentication on the web
application.
| > |
| > | Now we would like to add a new domain with a windows 2003 machine as
PDC
| > | (domain2003.com)
| > |
| > | My question now is, can we get rid of the old DNS server and let the
| > | windows2003 be the DNS server for "domainNT.com" and his own domain
| > | "domain2003.com"?
| > | And another question: is it possible to build a trustrelationship
| > between
| > | the 2 domains (domainNT.com and domain2003.com) ?
| > |
| > | If it is possible, how can it be done?
| > |
| > |
| > | many thanx in advance
| > |
| > |
| > |
| >
|
|
|

.

Relevant Pages

  • Re: Cached user credentials and logon to different domain
    ... No there is no no trust between domains - and there is no possible way make ... as domains are completly separated (no network connection) ... >> map a shared drive on our domain server though a VPN tunnel. ... please direct all replies ONLY to the Microsoft public ...
    (microsoft.public.windows.server.active_directory)
  • Re: Pathworks 6.0C Windows 2003k AD Domain, making it work.
    ... you mentioned to get the trust to work properly. ... Require strong (Windows 2000 or later) session key ... Network access: Do not allow anonymous enumeration of SAM accounts ... > I installed the new 2003 machine as a AD Server, ...
    (comp.os.vms)
  • Re: Windows 2003 DNS and Windows NT4
    ... Now what I originally wanted is an one way trust (WinNT trusts Windows 2003) ... can we get rid of the old DNS server and let the ...
    (microsoft.public.windows.server.migration)
  • Re: an XP workstation seeing two domains
    ... This should help you out with setting up the trust ... How to establish trusts with a Windows NT-based domain in Windows Server ... section in the registry. ...
    (microsoft.public.windows.server.setup)
  • RE: How to create trust relationship between Windows 2003 Server (domain controler) and Windows NT 4
    ... relationship between windows NT and Windows 2003 by following the ... Establish Trusts with a Windows NT-Based Domain in Windows Server ... How to Create a Trust Relationship ... Create a Two-Way Trust Relationship ...
    (microsoft.public.win2000.security)
Loading