Forest trust appears as "External" or "Unknown" type (311484)



The information in this article applies to:

  • Microsoft Windows Server 2003, Datacenter Edition
  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows 2000 Advanced Server SP1
  • Microsoft Windows 2000 Advanced Server SP2
  • Microsoft Windows 2000 Server SP1
  • Microsoft Windows 2000 Server SP2

This article was previously published under Q311484

SYMPTOMS

When you try to perform administrative tasks on trusts in a Microsoft Windows Server 2003 domain from a Microsoft Windows 2000 member server, forest trusts may be displayed incorrectly. Instead of the correct trust type description of Forest, the trust may appear as External or Unknown. This may cause confusion for an administrator because a Windows Server 2003 forest trust is transitive to all domains in the trusted forest, but an external trust is non-transitive and applies only to the domain that is trusting or being trusted. On member servers that are running Windows 2000, Windows 2000 Service Pack 1 (SPI), and Windows 2000 Service Pack 2 (SP2) and that are viewing a Windows Server 2003 forest trust, the trust type may be listed as External. For member servers that are running Windows 2000 Service Pack 3 (SP3) and that are viewing a Windows Server 2003 forest trust, the trust type may be listed as Unknown.

CAUSE

This problem occurs because the administrative tools for Windows 2000, specifically Active Directory Domains and Trusts (Domain.msc), cannot correctly interpret the "Forest" trust type.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Modification Type:MajorLast Reviewed:7/2/2004
Keywords:kbenv kbnetwork kbprb kbui KB311484