We upgraded our Win2k AD domain to Win2k3 a few months ago. Now I'm attempting to set up a two-way trust with an outside Win2k3 domain, and I found out that _msdcs.company.com in the Win2k3 domain is at the same level as the company.com zone. So I found out this means that they build this as a Win2k3 domain rather than upgrading from Win2k.
I found http://support.microsoft.com/?id=817470 on how to reconfigure an _msdcs subdomain to a forest-wide DNS application directory partition when you upgrade from Win2k to Win2k3, but we haven't done that (didn't know about it until just now). Question is - I want to set up a two-way trust with this win2k3 domain, but when I set them up as a secondary zone in our empty root domain, we didn't get the _msdcs data since it's just a grey reference folder rather than actual data. How do I get the two-way trust working? Do I have to set up two secondary zones in my empty root domain, one for company.com and one for _msdcs.company.com? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail is confidential, may contain proprietary information of the Cooper Cameron Corporation and its operating Divisions and may be confidential or privileged. This e-mail should be read, copied, disseminated and/or used only by the addressee. If you have received this message in error please delete it, together with any attachments, from your system. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
