Trust issues between servers

[dibekem]

Hi everyone.

I setup a trust between 2 servers but it only seems to workone way when I try to give access to a folder.

I’m trying give permissions to access a folder on the curriculumserver for users on the admin server but when I click on the folder’sproperties ,security, add new user, change the location, select the admin server and trying to find a user on it the whole thing justfreeze then comes back saying name not found. However if I try to give access to afolder on the admin server for curriculum users there is no problem.

The curriculum server is a Win server 2008 r2 server and theadmin server is a Win 2012 r2 server.

Any help would be much appreciated

[Michael]

I presume you've configured DNS? This is crucial so they can properly resolve each other.

 

Creating a Stub Zone on each domain is sufficient, as it creates a read-only copy of each other's zones if that makes sense.

[dibekem]

Yes DNS is configured however just checked and they are set to secondary not stub zone. I just changed to stub on one of the server but now I messed it up:/ now it says zone not loaded by dns server

[dibekem]

just fixed it back to the secondary.

 

do I need to change them to stub zone?

[3s-gtech]

Is the trust two-way?

[dibekem]

Yes it is

[dibekem]

The outgoing trust was successfully validated.

The secure channel (SC) reset on Active Directory DomainController \\servername.curriculum.net of domain curriculum.net to domain admin.localfailed with error: There are currently no logon servers available to servicethe logon request.

 

This is what I get when I try to validate the trust

[andydis]

can you ping each server using the FQDN ? from each server?

[dibekem]

I can ping the admin server on both servers, however I cannot ping the admin server from the curriculum server with its FQDN.

 

Somewhere read that might be the firewall blocking it?

[3s-gtech]

Most likely the DNS zone isn't being seen properly - as well as trusts, you'll need to make sure that the two DNS zones can lookup between each other. You'll probably need to set Forwarders (right click on the DNS server and select Properties). That's if both domains are DNS integrated.

[dibekem]

Thanks for your reply.

 

Forwarders are set on both servers to see each other and validating okay with a green tick.

 

I can even see all the admin computers name and ip addresses on the curriculum server under forwarders and under the admin.local server but can't see or ping the admin.local server ;

[Michael]

Are these two domains/servers on the same LAN or separated by a WAN? You could try disabling the software and set a bypass (on each IP), if there are any hardware firewalls in place.

[dibekem]

Hi.

 

Both servers are on the same LAN.

 

Firewall is set to off on both servers I think due to SIMS

[andydis]

on both servers, in TCP properties what are the DNS servers set you use? (there may be more than 1)