Native and Mixed Mode Trust

[TheStressFactor]

I am trying to set-up a trust between two domains...one domain is a win2k native mode and the other is a win2k/nt server mixed mode. Is it possible for these two to trust each other even though the domains are set up in different modes? Any help, direction, or insight would be greatly appreciated. Thank you.

Patrick

 

[HEX1000]

Yes it is possible.

Heres the MS KB that takes you through it:

http://support.microsoft.com/default.aspx?scid=kb;en-us;306733

thanks

 

[GiaBetiu]

I think that above answer is not what you want.

You can have trust relationships between two domains from different forests.
The fact that is native or mixt affect other issues (in this case, like using UPN).
But, don't forget! DNS is the locator service. If you don't have a proper DNS configuration, when you will try to make the trust you will see that one DC cannot see the other domain. Gia Betiu
m.betiu@chello.nl
Computer Eng. CNE 4, CNE 5, soon MCSE2k

 

[TheStressFactor]

Excellent...my consultant suspected it may be a dns issue rather than a mixed mode/native mode compatibility issue. I just wanted to make sure. Thank you...we will look into the dns issue further.

Patrick

 

[TheStressFactor]

Gia,

One more question...in our dns lookup there is only a lookup zone for my domain..would I have to set one up for the domain I am trying to establish a trust with?

Patrick

 

[GiaBetiu]

Welllll
Now there are issues about designing the DNS.
The rule is that the two DNS zones should be available on both sides.
You can do this very easy making a secondary zone of each one of them on the other DNS servers
Net1: zone: company1.com
server 1: authoritative for company1.com zone
secondary for company2.com
Net2: zone: company2.com
server 2: auth. for company2.com zone
secondary for company1.com zone
Gia Betiu
m.betiu@chello.nl
Computer Eng. CNE 4, CNE 5, soon MCSE2k

 

[TheStressFactor]

Gia...brilliant..worked like a charm

Patrick

 

[TheStressFactor]

Gia,

While on the subject of dns...I have two remote subnets that I cannot ping by ip..if i look at all my hosts I only see the hosts on the local network and not my remote netwsork..furthermore, i cannot ping them by name...any suggestions?

Patrick

 

[GiaBetiu]

If you cannot ping them on IP address then you have a low level connectivity problem. Because there are two subnets between them should be a router. Check the router! Gia Betiu
m.betiu@chello.nl
Computer Eng. CNE 4, CNE 5, soon MCSE2k