Microsoft KB Archive/303922

= Unable to Establish Trust Between Windows 2000 and Windows NT Domain with NDS =

Article ID: 303922

Article Last Modified on 10/31/2006

-

APPLIES TO


 * Microsoft Windows 2000 Service Pack 1
 * Microsoft Windows 2000 Service Pack 2
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows NT Server 4.0 Standard Edition

-



This article was previously published under Q303922



SYMPTOMS
When you try to establish a two-way trust between a Windows 2000 domain and a Windows NT domain with NDS for Windows NT installed, the Windows NT domain can trust the Windows 2000 domain, but the Windows 2000 domain cannot trust the Windows NT domain.

When you try to create the trust, you may receive one of the following error messages:

UNKNOWN ERROR

Trust is established, but could not be verified



CAUSE
This issue can occur because NDS does not support a period character (.) as a valid character in an object name. Because of this, the Windows 2000 domain name (such as domain.com) prevents the establishment of the trust.



RESOLUTION
To work around this issue and implement NDS for Windows NT:
 * 1) Rename the Microsoft domain to a valid NDS object name and then restore.
 * 2) Remove NDS for Windows NT completely, establish the two-way trust, and then install NDS for Windows NT.



MORE INFORMATION
The third-party products that are discussed in this article are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.

Keywords: kberrmsg kbnetwork kbprb kb3rdparty kbosnovell KB303922

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.