Unable to Establish an Explicit Trust Between Windows 2000-Based Domains (312003)
The information in this article applies to:
- Microsoft Windows 2000 Server
This article was previously published under Q312003 SYMPTOMS
When you attempt to establish an explicit trust between two Windows 2000-based domains that are in different forests, you may receive the following error message:
The DomainName domain cannot be contacted. If this domain is a Windows domain, the trust cannot be set up until the domain is contacted. Click Cancel and try again later. If this is an interoperable non-Windows Kerberos realm and you want to set up this side of the trust, click OK.
CAUSE
This issue can occur if the domain controller where the trust is being configured cannot resolve the IP address of the primary domain controller (PDC) in the other domain.
RESOLUTION
To resolve this issue, make sure that Windows Internet Name Service (WINS), Domain Name System (DNS), or the LMHOSTS file is configured correctly to locate the PDC, and that TCP/IP is configured correctly on all of the domain controllers that are involved.
Modification Type: | Minor | Last Reviewed: | 7/8/2005 |
---|
Keywords: | kberrmsg kbnetwork kbprb kbSecurity KB312003 |
---|
|