trust relationship between two forests and conditional forwarders

Answered trust relationship between two forests and conditional forwarders

  • Thursday, November 22, 2012 4:08 PM
     
     

    Hi,

    I've been  dealing with AD since august 2012, at the moment I'm preparing to 70-640 exam with Microsoft Press  Exam MCTS 70-640.

    I'm trying to perform exercises from capital 12

    I have two forests, contoso.com and tailspintoys.com, I want to create two-way relationship. I have created a stub zone in contoso.com for tailspintoys.com, then I wanted to create a CF on tailspintoys.com DC for contoso.com DC but I get an error:
    The server with this IP adress is not athoritative for the required zone.

    I have created two-way relationship between forests, and selected selective login, I have authenticated users from tailspintoys.com to login on contoso.com DC but when I try to log in as tailspintoys\username on contoso.com DC I get error:

    The security database on this server does not have a computer account for this workstation trust relationship


    I suppose that it may be some kind problem with DNS, I have completely no idea.

    All kind of help, refeer links etc will be appreciated.

All Replies

  • Monday, November 26, 2012 5:46 AM
    Moderator
     
     Answered

    Hi,

    You may start from the Checklist: Creating a forest trust to create a trust. Here is the link for you:

    http://technet.microsoft.com/en-us/library/cc756852(v=ws.10).aspx

    Before creating trust relationship, you need to configure the DNS for communication between domains. Generally, you have three options to provide cross-forest DNS name resolution below.

    l  conditional forwarders

    l  secondary zones

    l  stub zones

    Regards,


    Arthur Li

    TechNet Community Support