RE: Trust relationship problem

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



Dear Customer,

Thank you for posting in newsgroup.

According to the description, the issue is that you cannot create the trust
relationship between the domain "test.com" and "test.domain.com", and you
concern is that it may be related to the NetBIOS name of the domains. If I
have any misunderstanding, please feel free to let me know.

To troubleshoot the issue, I would like to confirm some information with
you firstly.

Information Needed:
======================

1. What is the operation system of the 2 domains, Windows Server 2003 or
Windows 2000 server?

2. Does "test.com" and "test.domain.com" belong to two different forests in
the issue?

3. What is the detailed error message the system popup when you attempted
to create the trust relationship between the two domains? Please let me
know the exact error WORD BY WORD.

Analysis and Suggestions:
========================

When we attempt to create the trust relationship between 2 domains, if the
target domain has a same NetBIOS name with the source domain, the trust
relationship cannot be created on both sides.

Based on this issue, there are 2 solutions here which may be helpful for
you.

Solution 1.

Since the target domain "test.domain.com" is just created, you may demote
it and re-create a new target domain with a different domain name (ex.
"target.domain.com"). After that, you may try creating the trust
relationship between the domain "test.doamin.com" and "target.domain.com".

Please note:
The first part of the domain name will be selected as the NetBIOS name by
default when you attempt to create a new target domain. Since the new
domain has been just create, so it is highly recommended that you select a
different NetBIOS name when you create the new target domain.

You may refer to:

How to promote and demote domain controllers in Windows 2000
http://support.microsoft.com/kb/238369
(This should be also applied to Windows Server 2003)

Solution 2.

If you don't want to demote and re-create the domain "test.domain.com", you
may also simply rename the target domain "test.domain.com" and just change
the NETBIOS name to another one. After that, you may try creating the trust
relationship between the source domain "test.doamin.com" and the new target
domain.

For how to rename the current domain, you may refer to:

Windows Server 2003 Active Directory Domain Rename Tools
http://technet.microsoft.com/en-us/windowsserver/bb405948.aspx

Step-by-Step Guide to Implementing Domain Rename
http://go.microsoft.com/fwlink/?LinkId=41359

Hope it helps.

I look forward to your reply and thank you for your time.


David Shen
Microsoft Online Partner Support

.



Relevant Pages

  • Re: Trust relationship problem
    ... concern is that it may be related to the NetBIOS name of the domains. ... to create the trust relationship between the two domains? ... Since the target domain "test.domain.com" is just created, ... (This should be also applied to Windows Server 2003) ...
    (microsoft.public.windows.server.migration)
  • Re: Help please Migration Tool for Mixed Mode Target Domain?
    ... > Does anyone know of a migration tool which will migrate users, groups, ... Generally you need the target domain in Native+. ... If the domain names (NetBIOS) are the same then ... a trust, trusts use NetBIOS; ...
    (microsoft.public.win2000.active_directory)
  • Re: promlem with active diectory on windows 2000
    ... it allowed me setup the trust. ... Did you run ADMT from the target domain? ... believe this needs to be setup. ... was when the DNS server on the server wont work. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Easy question on External Trust Perimeter-->Internal
    ... if you want to create an external trust between domains in separate forest ... with W2K or W2K3 DCs you can use DNS for nameresolution without NetBIOS. ... external trust without NetBIOS being used. ... but I beg to differ with Windows 2000 external trusts between ...
    (microsoft.public.windows.server.active_directory)
  • Re: Easy question on External Trust Perimeter-->Internal
    ... NetBIOS related ports... ... I thought that since I am setting the trust between ... > Microsoft MVP - Windows Server Directory Services ...
    (microsoft.public.windows.server.active_directory)