[avipenina]

Hi,

I've 2 domains 1 on Win2K3 R2 that called test.com and 1 on win2k that called realtest.com.
i need that users from test.com will see resources from realtest.com, what i mean by resource is shared folders and printers.
i think that i can achieve that by make a trust between those 2 domain's. am i right?
if so how do i establish a trust between those OS domains?
or maybe you have another idea...

p.s
those 2 domains are the primary domains and they are the forest domains.

Thx

[VictorL]

Hi,

1. both domains should see each other in DNS,
or they should use the same DNS servers or
set secondary zone replication for both DNS zones -
publish realtest.com on DNS of test.com and
publish test.com on DNS server of realtest.com.

2. establish trust with MMC

3. publish DNS suffixes order for both domains(GPO) to allow
clients to query DNS zones of non-native domain

[avipenina]

is there any article that describe how to do a trust between Win2k and Win2k3 R2 different forest?

[Stonelaughter]

As far as I'm aware (someone will be along directly to correct me), cross-forest trusts are a new feature with Windows Server 2003 and therefore trusts cannot be created to an external legacy forest. In fact, I believe that both forests in the Trust relationship must be at "Windows Server 2003" functional level.

[VictorL]

http://www.microsoft.com/technet/com...w0303.mspx#EXC

http://www.windowsnetworking.com/art...n-Forests.html

[Stonelaughter]

Quote from VictorL's second article:

The Prep Work

Before you can create a trust between forests, you must do a little bit of prep work to prepare the forests that will be involved in the trusts. The first thing that you must do is to raise the forest functional level of the two forests to Windows Server 2003.

This is simply not possible with a Windows 2000 Domain involved... therefore my answer is correct.

[VictorL]

Originally Posted by Stonelaughter

Quote from VictorL's second article:



This is simply not possible with a Windows 2000 Domain involved... .

thanks

[avipenina]

i relay don't follow what you are saying here.
as i understand from your posts ,you say that i can't do any trust between windows 2000 server domain controller and windows 2003 server r2 domain controller from different forests? i need any trust that will work. i want that users from server 2003 will enter resource from server 2000 and not the opposite.

[foze.bear]

A forest trust is one where 2 forests, with multiple domains are set up with all domains trusting each other. foreign domains can trust each other regardless of being 2000, 2003 or even NT.

Active Directory Domains and Trusts in Admin tools.

When the others mention DNS, they are correct. The trust will not be established if the domains cannot find each other.