win2000 to win2003 forest trust

[bookouri]

I have a two way trust between a win2k forest and a 2003 forest. On the 2003 forest the trust works fine. On the 2k forest everything is set up and appears to be done right, but I cant access groups on the 2003 forest from the 2k forest, although i can access groups on the 2k forest from the 2003 forest. If i go into AD trusts on the 2k forest and do VERIFY. I get an error that windows can not "find a PDC" for the other domain. DNS appears to be set right. I can ping the machines on either domain and get name resolution. I cant find any error numbers or anything that gives me any idea where to look for problems, there's nothing in the event logs... the error in AD domains and trusts just says to verify that the PDC is running and try again. I've never had to deal with multiple forests before so im lost right now.

any suggestions on how to troubleshoot this would be appreciated...

 

[itsp1965]

Have you added a root hint pointing to each other's DNS servers. I had to do this in order to get 2003-2000 two way trusts working in this way (ie browse access groups, users etc).

 

[bookouri]

no i didnt try that. i thought that since name resolution was working i wouldnt have to. ill give that a shot though..

thanks