can not build forest trust

-

hi all,

both forest (a.local) and forest b (b.local1) has windows 2003 functional level.

forest has windows 2008 r2 domain controllers; forest b has windows 2003 & 2008 r2 domain controllers.  added forwarders on both forests.

in forest b, can build forest trust forest a.

but, in forest a, can not build forest trust b.local1 does not exist , can not ping b.local either. sometimes, went out external ip when ping b.local1.

what missing?

thank you.


>if private ip shouldn't resolve public ip until static records created in forest b's dns server

i gave using conditional  forwarder , use seconday zone , able build forest trust.

we not have public ip these dcs , have 1 single nic has private ip.

sorry haven't sent info due urgency build forest trust request.

so, question:

i use seconday zone forest b in forest a, able build forest trust.  why?

but not conditional forwarders.

thank you.



Windows Server  >  Directory Services



Comments

Post a Comment

Popular posts from this blog

Generating Event ID 91, 44 with CA (In Event Viewer with source as Certsvc)

-
hi we in process of migrating win 2003 ad win2008 r2. when noticed logs found many errors , warning alerts ca below --could not connect active directory. certificate services retry when processing requires active directory access. (event id 91)----certificate services sagia ca can not open certificate store @ cn=ntauthcertificates,cn=public key services,cn=services in active directory's configuration container. (event id 94, warning)--                                                                                            ...
Read more

Group policy default policy cannot be edited because network name not found

-
hey everyone, i have been having issues on , off domain. pdc crashed (the domain controller). started old server , made domain controller , forced roles over. repaired pdc , elevated back. although appeared work found cannot rid of other dc because pdc can no longer contact domain things group policy or else. start secondary , domain magically reachable. although while secondary down can ping domain , replies ip of pdc appears pdc has no control on anything. questions following. 1. gpos created before crash no longer work. rebuilt sysvol , default problem can't edit default domain policy. don't believe having replication problems new repairing domains setting them , maintaining them of education came from.  2. if pdc gpo management console can't access gpos can secondary not have installed? 3. why domain unreachable if no dcs online when shutdown secondary. thanks in advance , try edit dc diag log right there on fails want narrow of out guys concentrate on...
Read more

Windows server 2012 r2 inplace upgrade failed

-
trying upgrade windows server 2012 2012r2 on physical box/nas (hosting vm's). this failed due "unknown error"? there several error logs, first few lines of 1 attached: setuperr.og (from c:\$windows.~bt\windows) 2013-10-06 14:22:55, error      [0x0803b6] mig    can't retrieve group information user nt service\mssql$microsoft##wid. netusergetlocalgroups failed 0x000008ad 2013-10-06 14:22:55, error      [0x0803b6] mig    can't retrieve group information user iis apppool\classic .net apppool. netusergetlocalgroups failed 0x000008ad 2013-10-06 14:26:23, error      [0x0808fe] mig    plugin {0b23c863-4410-4153-8733-a60c9b1990fb}: loadlibraryex error (c:\$windows.~bt\sources\replacementmanifests\microsoft-windows-textservicesframework-migration\imjpmig.dll) gle=126 2013-10-06 14:26:23, error      [0x0808fe] mig  ...
Read more