trust with NT4 domain

[jakess]

How do i create a trust between AD and another NT4 domain?

 

[pgaliardo]

AD Domains and Trusts. Right click your domain and click properties. Go to the Trusts tab. Click New Trust and follow the wizard. Allows you to set up a trust with an NT 4.0 domain.

 

[AKPolarBear]

If the AD and NT are on different domains, you might also want to create a trust from the NT side to the AD.

 

[jakess]

OK.
But i'm unable to create any trust in any direction between 2000AD and NT domain.
What other networking configurations must be in place before you can establish trusts between 2000 and NT domains?

 

[porkchopexpress]

Can the DC's ping each other by name?

Are they on the same subnet?

 

[jakess]

Yes they can ping by name and no they are on different subnets

 

[porkchopexpress]

Are you using WINS if not try putting the adresses in the LMHOSTS files.

http://support.microsoft.com/?kbid=150800

Do you receive any errors when the trust fails?

 

[jakess]

Error: "Specified domain cannot be contacted"

i have added static mappings to WINS and used LMHOSTS files....still it doesn't work

 

[NetIntruder]

make a host file on the NT4 side for domain.com to point to your AD Server and try quick.

~Intruder~
CEH, CISSP, MCSA/MCSE 2000/2003

"The Less You Do, The Less Can Go Wrong"

 

[jakess]

I have created those entries in the Host files on both sides.....still cannot create trusts on any sides.

 

[NetIntruder]

Can you ping yourADdomain.com from the NT server? as well as yourADDomain (NetBIOS Name)?

~Intruder~
CEH, CISSP, MCSA/MCSE 2000/2003

"The Less You Do, The Less Can Go Wrong"

 

[jakess]

i can ping servername.xxx.local but not xxx.local from NT domain

 

[NetIntruder]

ok, that's probably the issue then. does your host file on the NT Domain side have an entry for xxx.local in it with the right IP?

~Intruder~
CEH, CISSP, MCSA/MCSE 2000/2003

"The Less You Do, The Less Can Go Wrong"

 

[jakess]

What about the fact that we are using AD with DNS and they are NT with WINS?

 

[jakess]

Yip... It has the xxx.local entry with my GC server IP address.
At which site should i attempt do start the trust first?
AD or NT

 

[NetIntruder]

try pointing the NIC on the NT4 side DNS Settings (secondary or whatever works for you) to the AD Server.

~Intruder~
CEH, CISSP, MCSA/MCSE 2000/2003

"The Less You Do, The Less Can Go Wrong"

 

[NetIntruder]

it shouldn't matter which side you start with... just that all connectivity, naming, etc. is in place

~Intruder~
CEH, CISSP, MCSA/MCSE 2000/2003

"The Less You Do, The Less Can Go Wrong"

 

[porkchopexpress]

Your 2k domain isn't in native mode is it?

 

[jakess]

no it is mixed mode.

i cannot ping the domain name from any side....host unknown error

I have added NT pdc IP to my AD server Host file and other way around.

 

[NetIntruder]

You can't ping domain.local from either side?

~Intruder~
CEH, CISSP, MCSA/MCSE 2000/2003

"The Less You Do, The Less Can Go Wrong"