RE: Domain Migration: Can not find domain controller

Hello,

Thanks for your reply.

According to your test result, it seems to be not an DNS resolution issue.
I suspect this may be cause by security channel failure.

Please make a few change of "Default Domain Controller Policy" both on DCs
of Domain A and Domain B as mentioned below:

SMB Signing and/or Encrypting

- Microsoft network client: Digitally sign communications (always) DISABLED

- Microsoft network client: Digitally sign communications (if server
agrees) ENABLED

- Microsoft network server: Digitally sign communications (always) DISABLED

- Microsoft network server: Digitally sign communications (if client
agrees) ENABLED

- Domain member: Digitally encrypt or sign secure channel data (always)
DISABLED

- Network access: Named pipes can be accessed anonymously ENABLED LM
Compatibility

- Network security: LAN Manager authentication level: "Send LM & NTLM - use
NTLMV2 session security if negotiated"

After rebooting the servers, please check if you can create and validate
the inbound and outbound Trust from Domain B.

Hope it helps.

David Shen
Microsoft Online Partner Support

.

Relevant Pages

  • RE: SMBmount conspiracy
    ... My local security policy settings are like this: ... Microsoft network client - digitally sign communications - ... Microsoft network server - digitally sign communications - ...
    (RedHat)
  • Re: Domain Migration: Can not find domain controller
    ... I suspect this may be cause by security channel failure. ... Microsoft network client: Digitally sign communications DISABLED ... Microsoft network server: ...
    (microsoft.public.windows.server.migration)
  • RE: SMBmount conspiracy
    ... Local Policies - Security Options - Microsoft network client - digitally ... sign communications - DISABLED ... Local Policies - Security Options - Microsoft network server - digitally ...
    (RedHat)
  • The SMBMOUNT plot thickens
    ... Event viewer shows a successful logon by my mount.cifs client ... Microsoft network client - digitally sign communications - ... Microsoft network server - digitally sign communications - ...
    (RedHat)
  • Re: disable digital signing
    ... "Microsoft Network Client: Digitally sign communications " ... "Microsoft Network Server: Digitally sign communications ". ...
    (microsoft.public.windows.group_policy)