Hi there,

I have 2 forests, a.net and b.net.
I have placed a 2-way transitive trust between them.

Even though, child1.a.net can't see objects in child1.b.net and vice-versa.

What I did was create a shortcut trust between both child domains and that
worked fine.

I'm still trying to figure out why the 2-way transitive trust did not work
as expected.

Both domains are 2003 SP1 native mode.


--
NetAdmin <São Paulo, BR>

Re: Trust by Paul

Paul
Wed Mar 26 07:41:18 PDT 2008

A two way Forest trust should, as you state, allow access between every
domain in the forests.

Some things to check:

Make sure Selective Authentication is not enabled
Make sure the changes have been replicated forest wide.
Make sure the correct DNS infrastructure is in place
Make sure the -forest- functional level is Windows Server 2003

/ ) Regards,
/ /_________
_|__|__) Paul Weterings
/ (O_) http://www.servercare.nl
__/ (O_)
____(O_)


net_admin wrote:
> Hi there,
>
> I have 2 forests, a.net and b.net.
> I have placed a 2-way transitive trust between them.
>
> Even though, child1.a.net can't see objects in child1.b.net and vice-versa.
>
> What I did was create a shortcut trust between both child domains and that
> worked fine.
>
> I'm still trying to figure out why the 2-way transitive trust did not work
> as expected.
>
> Both domains are 2003 SP1 native mode.
>
>

Re: Trust by netadmin

netadmin
Mon Mar 31 17:06:32 PDT 2008

I've checked that in the past and everything is fine.

> Make sure Selective Authentication is not enabled
This is not in place.

> Make sure the changes have been replicated forest wide.
Replication is fine.

> Make sure the correct DNS infrastructure is in place
I can nslookup from both domains all of the root and child domains.

> Make sure the -forest- functional level is Windows Server 2003
All domains and forest are 2003 native.

Also, the FW (HW and SW) is not blocking any type of protocol.

--
NetAdmin <São Paulo, BR>


"Paul Weterings" wrote:

> A two way Forest trust should, as you state, allow access between every
> domain in the forests.
>
> Some things to check:
>
> Make sure Selective Authentication is not enabled
> Make sure the changes have been replicated forest wide.
> Make sure the correct DNS infrastructure is in place
> Make sure the -forest- functional level is Windows Server 2003
>
> / ) Regards,
> / /_________
> _|__|__) Paul Weterings
> / (O_) http://www.servercare.nl
> __/ (O_)
> ____(O_)
>
>
> net_admin wrote:
> > Hi there,
> >
> > I have 2 forests, a.net and b.net.
> > I have placed a 2-way transitive trust between them.
> >
> > Even though, child1.a.net can't see objects in child1.b.net and vice-versa.
> >
> > What I did was create a shortcut trust between both child domains and that
> > worked fine.
> >
> > I'm still trying to figure out why the 2-way transitive trust did not work
> > as expected.
> >
> > Both domains are 2003 SP1 native mode.
> >
> >
>