locked
Adding another trust but think's it already exists RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello,

    I'm just setting up anther domain trust (one-way) from US to Spain.  When I try and add the domain name of (Example) contoso.local it says it already exists, however i do have one called contoso.ie.

    Is it seeing the NETBIOS as the same name?

    How can I get round this?

     

     

    Wednesday, April 6, 2011 1:21 PM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    For configuring trust, Netbios name should not be similar for two domains, if it is similar you will not be able to configure trust.

    SID & FQDN name of domain has to be different too.

     

    References.

    http://social.technet.microsoft.com/Forums/en/winserverDS/thread/f89bc4b1-fdaf-4c0f-8a82-954b0c9d4d45

     

    Regards

    Awinish Vishwakarma| MY Blog

    Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.

    • Edited by Awinish Wednesday, April 6, 2011 1:40 PM Added link
    Wednesday, April 6, 2011 1:32 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello,

    you can't create a trust if the NetBios domain name is the same like domain and domain, doesn't matter if the FDQN is different. So please verify the names.

    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    Wednesday, April 6, 2011 1:38 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Oh dear they are the same.
    Wednesday, April 6, 2011 1:48 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Then its not possible to create a trust between them.

     

    Regards

    Awinish Vishwakarma| MY Blog

    Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.

    Wednesday, April 6, 2011 1:50 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    If NetBIOS names are the same, you can have a look to this Microsoft article about how to Domain Rename works:

    http://technet.microsoft.com/en-us/library/cc738208(WS.10).aspx

    Personally, I don't recommand this but you can have a look at it.

    Another solution is to create a new domain with different FQDN and NetBIOS names (Of course domain SID should be different) and use ADMT to migrate your AD objects. Once done, you will be able to create your trust relationship without problems.

     

    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner

    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

    Wednesday, April 6, 2011 1:52 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello,

    with the same names domain rename is one option which is not recommended from many people and has requirements like no Exchange 2007 and higher in the domain for example.

    The other option is to use ADMT and migrate one domain to a forest witha different name.

    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    Wednesday, April 6, 2011 2:02 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    To create trust, the NetBIOS name must be unique. In your case, you may consider renaming one of the domains or migrating one of the domains to a new domain.

     

    For more information, please refer to this article: http://support.microsoft.com/kb/930218

     

    Regards,

    Bruce

    This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Thursday, April 7, 2011 6:31 AM