How do I create a trust between Windows domains in different forests?

I'm having trouble creating a trust between two domains in different forests. When I try to create the trust, I get a message saying that access to domain is denied. What am I doing wrong?

    Requires Free Membership to View

When troubleshooting creating a trust relationship, you should first confirm that DNS name resolution and Active Directory replication are functioning correctly. Use netdiag, dcdiag and nslookup to ensure that all of your SRV records are registered correctly, and that each side of the trust can resolve the FQDN (fully qualified domain name) of the resources you're attempting to access.

You'll also need administrative credentials for both domains to create a trust relationship, or else you need to be working in conjunction with an administrator in the other domain.

This was first published in July 2005

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.