Werbung: SecurityConsole.de verwaltet Ihre Computer mit Security Essentails aus der Cloud!
30 Tage kostenfrei testen und 20% Rabatt für Ihre Bestellung mit Promocode: WBF2685582
(Promocode gültig bis 31.12.2011)

Group:  English: Windows Server » microsoft.public.windows.server.active_directory
Thread: Forest to Forest Trust Problem

HTVi
TV Discussion Newsgroups

Forest to Forest Trust Problem
CPickler 12/30/2008 6:16:06 AM
I went through and created a Forest to Forest trust to start the migration of
Active Directory to the new domain from the old domain. When I go into the
Domain Admins group to try to add Administrator of the opposite domain then I
get an error saying Administrator is not a correct name for an account on the
domain. If I do a search for accounts on the opposite server I get an error
stating "The following error prevented the display of any items: Server is
not operational"

I am logged into both servers and both are running, yet both give me the
error code about the other one. Is there a setting I am missing somewhere,
or is there a port I need to make sure is open between the servers or
anything like that? I got an error earlier when creating the trusts about
login server not available, but it created the trust anyway, so I thought it
overcame this error.
Re: Forest to Forest Trust Problem
"Florian Frommherz [MVP]" <florian[ at ]frickelsoft.DELETETHIS.net> 12/30/2008 6:50:17 AM
Howdie!

CPickler wrote:
[Quoted Text]
> I went through and created a Forest to Forest trust to start the migration of
> Active Directory to the new domain from the old domain. When I go into the
> Domain Admins group to try to add Administrator of the opposite domain then I
> get an error saying Administrator is not a correct name for an account on the
> domain. If I do a search for accounts on the opposite server I get an error
> stating "The following error prevented the display of any items: Server is
> not operational"
>
> I am logged into both servers and both are running, yet both give me the
> error code about the other one. Is there a setting I am missing somewhere,
> or is there a port I need to make sure is open between the servers or
> anything like that? I got an error earlier when creating the trusts about
> login server not available, but it created the trust anyway, so I thought it
> overcame this error.

Have you ensured there is proper name resolution between the two forests?

cheers,

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
Re: Forest to Forest Trust Problem
CPickler 12/30/2008 6:58:00 AM
How do I check that? I ran the two tests in the DNS options and both servers
passed both tests, so DNS is working, but beyond that I am not sure how to
check that.

"Florian Frommherz [MVP]" wrote:

[Quoted Text]
> Howdie!
>
> CPickler wrote:
> > I went through and created a Forest to Forest trust to start the migration of
> > Active Directory to the new domain from the old domain. When I go into the
> > Domain Admins group to try to add Administrator of the opposite domain then I
> > get an error saying Administrator is not a correct name for an account on the
> > domain. If I do a search for accounts on the opposite server I get an error
> > stating "The following error prevented the display of any items: Server is
> > not operational"
> >
> > I am logged into both servers and both are running, yet both give me the
> > error code about the other one. Is there a setting I am missing somewhere,
> > or is there a port I need to make sure is open between the servers or
> > anything like that? I got an error earlier when creating the trusts about
> > login server not available, but it created the trust anyway, so I thought it
> > overcame this error.
>
> Have you ensured there is proper name resolution between the two forests?
>
> cheers,
>
> Florian
> --
> Microsoft MVP - Group Policy
> eMail: prename [at] frickelsoft [dot] net.
> blog: http://www.frickelsoft.net/blog.
> Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
>
Re: Forest to Forest Trust Problem
"Jorge Silva" <jorgesilva_pt[ at ]hotmail.com> 12/30/2008 9:11:39 AM
Hi
For the error check:
http://support.microsoft.com/kb/837328

Ensure that Domain Name System (DNS) is properly set up.
If there is a root DNS server that can be made the root DNS server for both
of the forest DNS namespaces, make it the root server by ensuring that the
root zone contains delegations for each of the DNS namespaces. Also, update
the root hints of all DNS servers with the new root DNS server.
If there is no shared root DNS server and the root DNS servers for each
forest DNS namespace are running a member of the Windows Server 2003 family,
configure DNS conditional forwarders in each DNS namespace to route queries
for names in the other namespace.
If there is no shared root DNS server, and the root DNS servers for each
forest DNS namespace are not running a member of the Windows Server 2003
family, configure DNS secondary zones in each DNS namespace to route queries
for names in the other namespace.

Creating a forest trust
http://technet.microsoft.com/en-us/library/cc756852.aspx



--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.
"CPickler" <CPickler[ at ]discussions.microsoft.com> wrote in message
news:FB97A6EF-7D37-41A0-8986-AFC3DA77E94B[ at ]microsoft.com...
[Quoted Text]
>I went through and created a Forest to Forest trust to start the migration
>of
> Active Directory to the new domain from the old domain. When I go into
> the
> Domain Admins group to try to add Administrator of the opposite domain
> then I
> get an error saying Administrator is not a correct name for an account on
> the
> domain. If I do a search for accounts on the opposite server I get an
> error
> stating "The following error prevented the display of any items: Server is
> not operational"
>
> I am logged into both servers and both are running, yet both give me the
> error code about the other one. Is there a setting I am missing
> somewhere,
> or is there a port I need to make sure is open between the servers or
> anything like that? I got an error earlier when creating the trusts about
> login server not available, but it created the trust anyway, so I thought
> it
> overcame this error.

Re: Forest to Forest Trust Problem
Meinolf Weber [MVP-DS] <meiweb(nospam)[ at ]gmx.de> 12/30/2008 9:33:10 AM
Hello CPickler,

How did you configure DNS for the Trust?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


[Quoted Text]
> I went through and created a Forest to Forest trust to start the
> migration of Active Directory to the new domain from the old domain.
> When I go into the Domain Admins group to try to add Administrator of
> the opposite domain then I get an error saying Administrator is not a
> correct name for an account on the domain. If I do a search for
> accounts on the opposite server I get an error stating "The following
> error prevented the display of any items: Server is not operational"
>
> I am logged into both servers and both are running, yet both give me
> the error code about the other one. Is there a setting I am missing
> somewhere, or is there a port I need to make sure is open between the
> servers or anything like that? I got an error earlier when creating
> the trusts about login server not available, but it created the trust
> anyway, so I thought it overcame this error.
>

Home | Search | Terms | Imprint Contact
Newsgroups Reader - provided by WiredBox.Net
Suche nach Orten, Städten, Postleitzahlen, Vorwahlen, Kfz-Kennzeichen