Unable to Establish Trust Between Windows 2000 and Windows NT Domain with NDS (303922)

The information in this article applies to:

Microsoft Windows 2000 Server SP1
Microsoft Windows 2000 Server SP2
Microsoft Windows 2000 Advanced Server SP1
Microsoft Windows 2000 Advanced Server SP2
Microsoft Windows NT Server 4.0

This article was previously published under Q303922

SYMPTOMS

When you try to establish a two-way trust between a Windows 2000 domain and a Windows NT domain with NDS for Windows NT installed, the Windows NT domain can trust the Windows 2000 domain, but the Windows 2000 domain cannot trust the Windows NT domain.

When you try to create the trust, you may receive one of the following error messages:

UNKNOWN ERROR

Trust is established, but could not be verified

CAUSE

This issue can occur because NDS does not support a period character (.) as a valid character in an object name. Because of this, the Windows 2000 domain name (such as domain.com) prevents the establishment of the trust.

RESOLUTION

To work around this issue and implement NDS for Windows NT:

Rename the Microsoft domain to a valid NDS object name and then restore.
Remove NDS for Windows NT completely, establish the two-way trust, and then install NDS for Windows NT.

MORE INFORMATION

The third-party products that are discussed in this article are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.

Modification Type:	Minor	Last Reviewed:	10/13/2004
Keywords:	kb3rdparty kberrmsg kbnetwork kbOSNovell kbprb w2000trusts KB303922