Create external trusts between two domains

How do I create external trusts between two domains? We need to setup a test environment at our vendor's site, which has two DCs with different domain names, like test.com and vendor.dev. There are some other servers in the environment that need to be shared.

On the test.com DC, I added the vendor.dev DC's IP address and the domain name to the NIC properties. Also I added the vendor.dev DC name to the Domain Controller folder on the AD Users and Computers window. After these precedences, I was able to see the vendor.dev domain on the Domain and Trust window. I created a 2-way trust with the vendor.dev domain.

I tried to do the same thing on the vendor.dev DC, but I could not see the test.com domain on the vendor.dev DC. What can I do to make this work?

    Requires Free Membership to View

    Login

The steps that you describe of adding the DC's IP address to NIC properties and adding the DC to ADUC are not helpful in establishing a trust relationship. In order to establish a trust relationship between two separate forests, you need to ensure that you have proper DNS name resolution between the two forests - make sure that you can reach a remote domain controller by its IP address, FQDN, as well as by using its GUID. You also need to ensure that you have the appropriate network connectivity available by configuring your firewall or VPN as listed on  Microsoft's support site.

This was first published in December 2006

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.
    Back to top