How do I create a trust between Windows domains in different forests?
I'm having trouble creating a trust between two domains in different forests.
When I try to create the trust, I get a message saying that access to domain is denied. What am I
doing wrong?
When troubleshooting creating a trust relationship, you should first confirm that DNS name
resolution and Active Directory replication are functioning correctly. Use netdiag, dcdiag and
nslookup to ensure that all of your SRV records are registered correctly, and that each side of the
trust can resolve the
FQDN (fully
qualified domain name) of the resources you're attempting to access.
You'll also need administrative credentials for both domains to create a trust relationship, or
else you need to be working in conjunction with an administrator in the other domain.
This was first published in July 2005
Join the conversationComment
Share
Comments
Results
Contribute to the conversation