Hello, everybody!
We have an issue in our prod environment with trust between 2 forests.
Recently we have migrated one of our system from old datacenter to a new one. We migrated all the servers, except domain controllers. New domain controllers were installed on new site and all FSMO roles were transferred to them. Last week we demoted 3 old domain controllers at old site (last of them I needed to use /forceremoval option). Now we have an issue with trust between this forest A and our main forest B. We tried to recreate the trust but it fails (No logon servers available) when creating a trust from domain in forest B to domain in forest A, but it works other way from A to B.
If I run nltest /dcgetdc:B-domainname it works fine from DC of domain A
but other way running it from B I get an error DsGetDcName failed: Status = 1355 0x54b ERROR_NO_SUCH_DOMAIN
We already tried creating Host and SRV records and deleted condition forwarder and created a secondary zone.
Nothing works.
Any ideas, gents?