We recently upgraded our user domain to Active Directory.  The upgrade
process seemed to go well, but I am running into one strange glitch.

We have a second resource domain that is still NT4, where our Exchange 5.5
servers live.  All of the domain controllers are SP6a with current
patches.  The recently upgraded AD domain has two DCs with SP2 and current
patches.  It is in native mode.  There is a two-way trust (or two one-way
trusts; however you want to look at it) between the domains.  I have
verified the trust via the AD Domains and Trusts snap-in.

Here's the scenario: I joined my workstation to the upgraded domain -
let's call it domain A.  I then logged into my administrative account in
domain A.  I opened Exchange Administrator and tried to pull up the
permissions sheet on our site, and received this error:

"The trust relationship between the primary domain and the trusted domain
failed.  Microsoft Windows NT ID no.0xc00206fc."

I then tried logging into my NT account, and did not receive the error. 
When my workstation is joined to the NT domain instead, I never see the
trust error, no matter whether I log in to AD or NT.  Conversely, when my
workstation is in domain A, and I log into any AD domain, I get the trust
error.  I tried logging into different AD domains within the same forest
(with accounts that had access to Exchange) and putting my workstation in
different domains, until I narrowed down the problem.

To clarify, this is what I see:

workstation joined to: AD domain A (my upgraded domain)
logged into: any AD domain
trust error in Exchange Admin

workstation joined to: AD domain A
logged into: NT
no trust error

workstation joined to: NT resource domain
logged into: anything
no trust error

workstation joined to: other AD domains
logged into: anything
no trust error

Most of my users are joined to domain A, log into domain A, and access
their mail from the NT domain.  So, obviously the trust is working to some
extent.  I don't see any errors on the event logs on the AD or NT servers.
 My next step is to try recreating the trust, but if anyone has any
suggestions or experience with a similar problem, I would love to hear it.

-Kirsten

___
Kirsten Petersen
Network Engineering
Central Email Administrator
Oregon State University
541-737-9187


------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to