Hello! I have a question about setting up DNS in AD... The following is my environment (so far):
Empty Root (2 DC's)
Child Domain of Empty Root at HQ (2 DC's) DNS, WINS, DHCP
Child Domain of Empty Root at 'The Plant' (for now, 1 DC's) DNS
DNS is running on all the servers...Every 5 minutes I am getting a warning followed by an error on both Child Domain servers at HQ and The Plant:
Warning: SceCli 1202
Security policies are propagated with warning. 0x534 : No mapping between account names and security IDs was done.
Please look for more details in TroubleShooting section in Security Help.
Error: Userenv 1000
The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (1332).
The DC/DNS server at HQ delegates to The Plant's DNS zone. I don't have the opposite setup... Should I? Basically, I want DHCP clients in The Plant to have access to resources at HQ (or vice versa) or another location without having to go up the tree to go back down...
Any thoughts, suggestions, comments are greatly appreciated!
Thanks!
