Quantcast
Viewing all articles
Browse latest Browse all 31638

Forest trust validation - error - "windows cannot find an active directory dc for the example.com domain.

veryify that an ad dc is available and try again."  That happens when I try and validate one side of a forest trust.

Here's my scenario:  I'm trying to setup a two way, transitive forest trust between forest a and forest b.  The validation process is successful from forest A side.  When I try and validate the forest trust from B side - I get the error I listed.  Additionally, when I run nltest /dsgetdc:example.com (forest b)I get the following error:  getting dc name failed:  status = 1355 0x54b error_no_such_domain. 

However, the same command completes successfully from forest A side. 

I created secondary zones in each forest and I can ping the fqdn names successfully.  The only difference I can find is the domain zone for forest B has the _msdcs directly under the zone.  In contrast, for forest A, i had to create a secondary zone for the _msdcs and transfer it forest B becase this zone was not included as it normally is under the domain zone label.  I think this is causing the DC is Forest B to be unable to locate the SRV record for the forest A DCs even then the DC has a secondary zone which includes these records.

Anyway, your help and recommendations are greatly apprecaited.

                                           


Viewing all articles
Browse latest Browse all 31638

Trending Articles