external trust nt40 and w2k03

Discussion in 'Server Migration' started by rich, Aug 6, 2004.

  1. rich

    rich Guest

    We have an excisting nt4.0 domain and are bringing up a
    new win03 domain. we ned to create a trust so users in the
    new 03 domain can get access to resources in the nt4.0
    domain. We have gone through the steps to create a trust,
    all seems to go fine on the nt4.0 side, but when I start
    the trust setup on the 03server side I get the following.
    Select new trust, type in nt4.0 domain name and then
    before it goes any further it asks me for account
    credential for the 4.0 domain, we type in the domadmin
    info and we get an Error: Operation Failed, Access denied
    and the setup stops. we never get to the trust type or
    trust setup password. We have tried several other things
    and keep getting the same road block. Help !! any thoughts?
     
    rich, Aug 6, 2004
    #1
    1. Advertisements

  2. Hi Rich,

    Thanks for your posting here.

    I would like to recommend that you remove the trust in WinNT domain and
    refer to the following documents to recreate the two ways trusts.

    References:

    325874 HOW TO: Establish Trusts with a Windows NT-Based Domain in Windows
    http://support.microsoft.com/?id=325874

    816301 How to create an external trust in Windows Server 2003
    http://support.microsoft.com/?id=816301

    If the problem still occur, please let me know the detailed error message
    and check if there is any related error in the event log.

    Have a nice day!

    Regards,
    Bob Qin
    Microsoft Online Partner Support

    Get Secure! - www.microsoft.com/security

    ====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    ====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    Bob Qin [MSFT], Aug 9, 2004
    #2
    1. Advertisements

  3. rich

    rich Guest

    Bob,

    I have done the following, cleared all events from both
    servers. Set up trusts as per all documentation suggested
    and found otherwise and this is the result.

    From scratch on NT4.0 PDC logged in as DomAdmin, usrmngr,
    trusts new trusted, enter in new 03AD Domain name and
    trust password, gives me the normal error about trust not
    completely setup, click OK and 03 domain shows up in the
    list of trusted.
    Go to 03 AD Dom, login as DomAdmin, New trust, it prompts
    for the NT4.0 domain name, I type in and click next, I
    then get prompted for the credentials of an account with
    privileges to continue, I type in the NT4.0 DomAdmin
    account info and click OK, the very next box that comes up
    says the following.

    The trust relationship cannot be created because the
    following error occurred.
    The Operation Failed. The error is: Access is denied.


    I have checked the event viewer at both servers and found
    nothing at all. ??


    then all I can do is quit the setup. This is really
    strange and I am at a complete lose of what to look for
    next, I have a second NT4.0 domain and tried the same
    steps and received the same exact error. It must be
    something simple but all the articles I have been through
    say nothing about being prompted for credentials prior to
    trust type setup.

    Lost in Trust land, please help..

    Thanks
    Rich
     
    rich, Aug 10, 2004
    #3
  4. Hi Rich,

    Please select "One-way: incoming Users in this domain can be authenticated
    in the specified domain, realm, or forest." in the "Direction of Trust"
    window when create trust in Windows 2003. In the "Trust password" box, type
    the same trust password that you used on the Windows NT-based domain
    controller. Type the password again in the "Confirm trust password" box.

    Does it work?

    Regards,
    Bob Qin
    Microsoft Online Partner Support

    Get Secure! - www.microsoft.com/security

    ====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    ====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    From: "rich" <>
    Sender: "rich" <>
    References: <133901c47bbd$0ea646b0$>
    <>
    Subject: RE: external trust nt40 and w2k03
    Date: Tue, 10 Aug 2004 06:22:47 -0700


    Bob,

    I have done the following, cleared all events from both
    servers. Set up trusts as per all documentation suggested
    and found otherwise and this is the result.

    From scratch on NT4.0 PDC logged in as DomAdmin, usrmngr,
    trusts new trusted, enter in new 03AD Domain name and
    trust password, gives me the normal error about trust not
    completely setup, click OK and 03 domain shows up in the
    list of trusted.
    Go to 03 AD Dom, login as DomAdmin, New trust, it prompts
    for the NT4.0 domain name, I type in and click next, I
    then get prompted for the credentials of an account with
    privileges to continue, I type in the NT4.0 DomAdmin
    account info and click OK, the very next box that comes up
    says the following.

    The trust relationship cannot be created because the
    following error occurred.
    The Operation Failed. The error is: Access is denied.


    I have checked the event viewer at both servers and found
    nothing at all. ??


    then all I can do is quit the setup. This is really
    strange and I am at a complete lose of what to look for
    next, I have a second NT4.0 domain and tried the same
    steps and received the same exact error. It must be
    something simple but all the articles I have been through
    say nothing about being prompted for credentials prior to
    trust type setup.

    Lost in Trust land, please help..

    Thanks
    Rich
     
    Bob Qin [MSFT], Aug 11, 2004
    #4
  5. rich

    Guest Guest

    Bob,

    On this peticular 03server box, I DO NOT EVEN get to the
    trust type or trust password screen. This is my very
    issue, before I get to those prompts, this box is asking
    me for credentials of the NT4.0 domain, again,when
    prompted we put in all the proper info and it gives the
    error stated below and ends the setup. I have gone and
    setup a dummy domain on another box and the proccess works
    fine. So I am not sure why the first setup is behaving
    this way.

    Thanks,
    Rich
     
    Guest, Aug 11, 2004
    #5
  6. Hi Rich,

    Selecting trust type should appear before input password. If the problem
    occurs next time, it will be better that you make some screen captures for
    the steps you have perfomed.

    In additin, you can also check the WINS server and DNS server settings on
    both domains to make sure the name resolution works properly.

    Have a nice day!

    Regards,
    Bob Qin
    Microsoft Online Partner Support

    Get Secure! - www.microsoft.com/security

    ====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    ====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    From: <>
    Subject: RE: external trust nt40 and w2k03
    Date: Wed, 11 Aug 2004 05:21:23 -0700
    Newsgroups: microsoft.public.windows.server.migration

    Bob,

    On this peticular 03server box, I DO NOT EVEN get to the
    trust type or trust password screen. This is my very
    issue, before I get to those prompts, this box is asking
    me for credentials of the NT4.0 domain, again,when
    prompted we put in all the proper info and it gives the
    error stated below and ends the setup. I have gone and
    setup a dummy domain on another box and the proccess works
    fine. So I am not sure why the first setup is behaving
    this way.

    Thanks,
    Rich
     
    Bob Qin [MSFT], Aug 12, 2004
    #6
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.