.....and it only seems to work with a net use connection to C$ in place at the same time. I have to apologise if this thread is useless for others, this is probably related more to our Server build than anything else. Thanks for all the pointers though.....
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Smith, Brad Sent: 29 November 2005 09:51 To: [email protected] Subject: RE: [ActiveDir] Trusts..... Got it. I dumbed down all the signing, encrypting and NTLM prerequisites (ie, LM and NTLM, not NTLM2) and it worked. Now I need to slowly beef it up again and see what I can get away with before things start to fail. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Smith, Brad Sent: 29 November 2005 09:31 To: [email protected] Subject: RE: [ActiveDir] Trusts..... Yep, that was one one of the 1st things I tried. It works, as does changing focus of AD tools and eventvwr to point to the other domain. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bernard, Aric Sent: 28 November 2005 17:56 To: [email protected] Subject: RE: [ActiveDir] Trusts..... Errr.....trust creation process! :) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bernard, Aric Sent: Monday, November 28, 2005 9:18 AM To: [email protected] Subject: RE: [ActiveDir] Trusts..... Brad, Have you attempted to connect to the "C$" (or any other) share between the PDCe of the two domains? Is this successful? Aka Do you have RPC connectivity outside of the share creation process? Aric -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Smith, Brad Sent: Monday, November 28, 2005 7:13 AM To: [email protected] Subject: RE: [ActiveDir] Trusts..... Thanks Diane but that isn't the issue here as these domains have never seen each other before. They were deployed specifically to figure out how they would trust each other. The W2K3 build is fairly locked down, so I wanted to troubleshoot it and get it working. I have down everything I can think of which is mainly the items in the KB article below, but still no joy. I thnik the next step is to jumop into netmon....eeek. Watch this space. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ayers, Diane Sent: 28 November 2005 14:50 To: [email protected] Subject: RE: [ActiveDir] Trusts..... You mention that it is a legacy trust. I don't know how far back it goes legacy wise but I ran into an issue where a legacy trust could not be "upgraded" (modified) as the trust existed prior to upgrade (way back in NT 4.0 land) and the solution was to delete the trust entirely and recreate. There is a KB article on it which I don't have at my fingertips but the root issue was that the legacy trust did not have the rights GUIDs to be modified. Not sure if this is the situation you are running into or not. Diane -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Smith, Brad Sent: Monday, November 28, 2005 5:58 AM To: [email protected] Subject: RE: [ActiveDir] Trusts..... Grr. This thing won't budge. I have implemented the settings from the article below, but still no joy. I will hopefully have missed something and will re-check.....watch this space. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Smith, Brad Sent: 28 November 2005 11:50 To: [email protected] Subject: RE: [ActiveDir] Trusts..... Found it...thanks... http://support.microsoft.com/default.aspx?scid=kb;en-us;889030 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris Sent: 25 November 2005 16:00 To: ActiveDir.org Subject: Re: [ActiveDir] Trusts..... Brad, I am not in the office at the moment but there is a microsoft Kb titled something like creating trusts are not establised as expected, this has about 8 steps you can walk through to trouble shoot. Regards Mark -----Original Message----- From: "Smith, Brad" <[EMAIL PROTECTED]> Date: Fri, 25 Nov 2005 13:56:42 To:[email protected] Subject: RE: [ActiveDir] Trusts..... Sorry....It is a legacy trust between a W2K Domain (Single Domain, Single Forest) and a W2K3 Domain (Single Domain, Single Forest). I know how to create trusts, that bit is easy enough, what I am having problems with is understanding and troublshooting why it can't create an RPC connection to do the required bits and pieces, I am not even getting to the point where it asks for authentication details, I have only specified the destination domain, and then it fails with a "unable to establish RPC" type error message. I can resolve the DNS name of domain, ie domain.com.... any ideas ? From: Almeida Pinto, Jorge de [mailto:[EMAIL PROTECTED] On Behalf Of Almeida Pinto, Jorge de Sent: 24 November 2005 16:18 To: [email protected] Subject: RE: Trusts..... Hi, You do not mention the type of trust you want to create but between a W2K and W2K3 forest you can only create external trusts. For more info see: http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/S erve rHelp/b30ef067-746e-4453-b879-804259aafdd3.mspx Cheers, Jorge From: [EMAIL PROTECTED] on behalf of Smith, Brad Sent: Thu 11/24/2005 4:15 PM To: [email protected] Subject: Trusts..... Hi List, I am having annoying problems getting two forests to establish a trust (one is W2K, one is W2K3). Has anyone got a reference to what permissions are required???? TIA, Brad This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. This message has been scanned for viruses by MailControl - (see http://bluepages.wsatkins.co.uk/?4318150) This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
