Setting Up Domain Trust Relationship

Mr. Smith

Hello all and I would like to thank you for any assistance you may provide.



I have setup two active directory servers 'D1' and 'D2'. They are located
in different sites apart from each other. I have used routing and remote
access to create a persistent connection from 'D1' to 'D2'.

Now I am looking to make a trust relation between the domains so users from
'D1' and 'D2' can share printers, file shares, perhaps exchange..etc.

What I did in the DNS of 'D1' is add a DNS Record that is sure to point to
the 'D2' servers IP Address over the VPN Tunnel made in Routing and Remote
Access.

This is where I have an issue trying to create the trust. I get the error
message of:

The Local Security Authority is unable to obtain an RPC connection to the
domain controller %DC%. Please check that the name can be resolved and that
the server is available".

Now I am stuck and seeking help. Perhaps I did something "WRONG" on my
part, I am sure I may have.

Both Servers are Server 2003 and have been dcpromo 'ed to be their DC for
their domains forest.

Any further info that may assist me would be appreciated.

Olaf Engelke [MVP Windows Server]

Hello,
"Mr. Smith" <mrsmith@boxen.homeip.net> schrieb im Newsbeitrag
news:uxTkN%23prHHA.1268@TK2MSFTNGP03.phx.gbl...
> I have setup two active directory servers 'D1' and 'D2'. They are located
> in different sites apart from each other. I have used routing and remote
> access to create a persistent connection from 'D1' to 'D2'.
>
> Now I am looking to make a trust relation between the domains so users
> from 'D1' and 'D2' can share printers, file shares, perhaps exchange..etc.
>
> What I did in the DNS of 'D1' is add a DNS Record that is sure to point to
> the 'D2' servers IP Address over the VPN Tunnel made in Routing and Remote
> Access.
>
> This is where I have an issue trying to create the trust. I get the error
> message of:
>
> The Local Security Authority is unable to obtain an RPC connection to the
> domain controller %DC%. Please check that the name can be resolved and
> that the server is available".
>
establishing a Domain trust requires also NetBIOS name resolution. So set up
a WINS server (if you did not already) and have both Domain controllers
registering themself at this server. This could already be enough to solve
your problems.
Best greetings from Germany
Olaf

Mr. Smith

Thank you ... I got it...
This is what i did to fix my issue:

-----------------------------------
went back to my 'd1' server where I added the new zone for the 'd2' domain
and removed it.

Now I have added a forwarder IP of 10.0.100.1 (this is the IP Address of the
remote site's DNS (also the DC for that site) I Also preformed an ipconfig /
flushdns to clear any cached info in DNS on my 'D1' server.

My steps:

1. Opened the DNS console under Administrative Tools, right-click on
the DNS server node, select properties to open the Properties sheet for the
DNS server, and select the Forwarding tab.

2. On DNS domain: First, click the new button and type the name of the
domain you want your name server to conditionally forward to: domain2.com
for example. (new domain appears in the top list box) I will keep this
selected

3. Now I typed the IP Address of the conditional forwarded
(10.0.100.1) [Apply] and Clicked [OK]



When testing I can ping the remote systems FQDN's on that network. Example:
fileserver.domain2.com , sqldb.domain2.com and so on.

--------------------------------------
All worked after these steps.