Re: Trust relationship problem

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



"David Shen [MSFT]" <v-dashen@xxxxxxxxxxxxxxxxxxxx> a écrit dans le message de news:SHGKTOnqIHA.1784@xxxxxxxxxxxxxxxxxxxxxxxxx
Dear Customer,

Thank you for posting in newsgroup.

Thank you for this answer.

According to the description, the issue is that you cannot create the trust
relationship between the domain "test.com" and "test.domain.com", and you
concern is that it may be related to the NetBIOS name of the domains. If I
have any misunderstanding, please feel free to let me know.

To troubleshoot the issue, I would like to confirm some information with
you firstly.

Information Needed:
======================

1. What is the operation system of the 2 domains, Windows Server 2003 or
Windows 2000 server?


The two systems are Windows Serveur 2003 SP2

2. Does "test.com" and "test.domain.com" belong to two different forests in
the issue?

Actually they do belong to different forests

3. What is the detailed error message the system popup when you attempted
to create the trust relationship between the two domains? Please let me
know the exact error WORD BY WORD.

You'll find attached a picture of the message (sorry it's french).


Analysis and Suggestions:
========================

When we attempt to create the trust relationship between 2 domains, if the
target domain has a same NetBIOS name with the source domain, the trust
relationship cannot be created on both sides.

Based on this issue, there are 2 solutions here which may be helpful for
you.

Solution 1.

Since the target domain "test.domain.com" is just created, you may demote
it and re-create a new target domain with a different domain name (ex.
"target.domain.com"). After that, you may try creating the trust
relationship between the domain "test.doamin.com" and "target.domain.com".

Please note:
The first part of the domain name will be selected as the NetBIOS name by
default when you attempt to create a new target domain. Since the new
domain has been just create, so it is highly recommended that you select a
different NetBIOS name when you create the new target domain.

You may refer to:

How to promote and demote domain controllers in Windows 2000
http://support.microsoft.com/kb/238369
(This should be also applied to Windows Server 2003)

Solution 2.

If you don't want to demote and re-create the domain "test.domain.com", you
may also simply rename the target domain "test.domain.com" and just change
the NETBIOS name to another one. After that, you may try creating the trust
relationship between the source domain "test.doamin.com" and the new target
domain.

For how to rename the current domain, you may refer to:

Windows Server 2003 Active Directory Domain Rename Tools
http://technet.microsoft.com/en-us/windowsserver/bb405948.aspx

Step-by-Step Guide to Implementing Domain Rename
http://go.microsoft.com/fwlink/?LinkId=41359

Hope it helps.

I look forward to your reply and thank you for your time.


David Shen
Microsoft Online Partner Support


My concern is that I do need to keep the domain name as test.domain.com in the migrated domain, isn't it any simplest way than renaming twice the domain? which we lead us to install another server as we do not have any at this moment to use as control station ...

Many thanks and best regards,
Benoît Bianchi.

Attachment: Error_Msg.jpg
Description: JPEG image



Relevant Pages

  • RE: Trust relationship problem
    ... the issue is that you cannot create the trust ... concern is that it may be related to the NetBIOS name of the domains. ... Since the target domain "test.domain.com" is just created, ... Windows Server 2003 Active Directory Domain Rename Tools ...
    (microsoft.public.windows.server.migration)
  • Re: Trust between two domains with the same NetBios name
    ... Trust relationships require different NetBIOS ... Windows Server - Networking ... functional level in both domains is Windows Server 2003. ...
    (microsoft.public.windows.server.general)
  • Re: Help please Migration Tool for Mixed Mode Target Domain?
    ... > Does anyone know of a migration tool which will migrate users, groups, ... Generally you need the target domain in Native+. ... If the domain names (NetBIOS) are the same then ... a trust, trusts use NetBIOS; ...
    (microsoft.public.win2000.active_directory)
  • Re: External Trust Issue
    ... You don't say whether or not you have created the trust? ... incoming external trust in the target domain: ... Microsoft MVP - Windows Server - Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • RE: NT4<>W2K3 Trust error: Could not find a domain controller for this domain.
    ... we use NETBIOS name to establish trust. ... Windows Server 2003-based domain is Example.com, ... Establish Trusts with a Windows NT-Based Domain in Windows ...
    (microsoft.public.windows.server.migration)