Scenario I have a forest that is a root place holder and two child domains. Domain.Com; Child1.Domain.com; Child2.Domain.com.
The forest is in Windows Server 2003 Forest mode. Domain.com is all Windows Server 2003 SP1 Child1.domain.com is all Windows Server 2003 SP1 Child2.domain.com is all Windows Server 2003 SP1 bar one DC. Child1 and Child2 both have trusts to a Windows NT4.0 sp 6.0a domain. The Problem When I upgrade the last DC to W2K3 Service Pack 1 in Child2.Domain.com it breaks the trust to the NT4.0 environment and I am at a loss as to why. Child1.domain.com continues to function correctly and the trust does not break. All domains in the forest run the same security principles and nothing appears in the event logs. Removal of SP1 reverses the issue and all trusts are restored - without the need to recreate them. The only error message I get is when I go to validate the trust: Verification of the trust between the domain xyz and the domain 123 was unsuccessful because: Access is Denied. All accounts used are Domain Admins. Any suggestions? The issue is not currently critical as I have removed the Service Pack, but I will need to reapply the Service Pack soon, Mark List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
