Trust problem

Following the guides in my MS Press book (Upgrading your Certification to
Windows 2003) on creating a cross forest trust with Windows 2003.

I have raised the domain level and forest levels to Windows Server 2003,
rebooted yet when I try to create any kind of trust i get an error message:

The operation failed. The error is: This operation cannot be performed on
the current domain.

I have tried domain, forest, one way in/ou, and am at a loss. Both servers
are on the same subnet, same ip range, i can ping DNS and IP. Only one
account on each server, it has full admin rights to everything. Nothing
shows up in event viewer and the rather generic error message is of no help.

Any suggestion?

Thanks


Happy New Year!

Rod

Lazyadmin
Thu Jan 01 16:29:43 CST 2004

Update, i can create Realm trusts, but no others. The battle
continues........


"Lazyadmin" <rodb@dortoh.ca> wrote in message
news:edKzbSL0DHA.2116@TK2MSFTNGP11.phx.gbl...
> Following the guides in my MS Press book (Upgrading your Certification to
> Windows 2003) on creating a cross forest trust with Windows 2003.
>
> I have raised the domain level and forest levels to Windows Server 2003,
> rebooted yet when I try to create any kind of trust i get an error
message:
>
> The operation failed. The error is: This operation cannot be performed on
> the current domain.
>
> I have tried domain, forest, one way in/ou, and am at a loss. Both
servers
> are on the same subnet, same ip range, i can ping DNS and IP. Only one
> account on each server, it has full admin rights to everything. Nothing
> shows up in event viewer and the rather generic error message is of no
help.
>
> Any suggestion?
>
> Thanks
>
>
> Happy New Year!
>
> Rod
>
>
>
>

someguy
Fri Jan 02 09:30:01 CST 2004

Whats Event View say?

Ya!
Fri Jan 02 10:12:09 CST 2004

I smell a RELOAD coming on!!!!


>-----Original Message-----
>Following the guides in my MS Press book (Upgrading your
Certification to
>Windows 2003) on creating a cross forest trust with
Windows 2003.
>
>I have raised the domain level and forest levels to
Windows Server 2003,
>rebooted yet when I try to create any kind of trust i get
an error message:
>
>The operation failed. The error is: This operation cannot
be performed on
>the current domain.
>
>I have tried domain, forest, one way in/ou, and am at a
loss. Both servers
>are on the same subnet, same ip range, i can ping DNS and
IP. Only one
>account on each server, it has full admin rights to
everything. Nothing
>shows up in event viewer and the rather generic error
message is of no help.
>
>Any suggestion?
>
>Thanks
>
>
>Happy New Year!
>
>Rod
>
>
>
>
>.
>

Lazyadmin
Fri Jan 02 12:16:16 CST 2004

Did you get that from The Idiots Guide to Windows Server Repair or think of
that all by yourself :)


"Ya!" <anonymous@discussions.microsoft.com> wrote in message
news:009201c3d14b$2c80b250$a101280a@phx.gbl...
> I smell a RELOAD coming on!!!!
>
>
> >-----Original Message-----
> >Following the guides in my MS Press book (Upgrading your
> Certification to
> >Windows 2003) on creating a cross forest trust with
> Windows 2003.
> >
> >I have raised the domain level and forest levels to
> Windows Server 2003,
> >rebooted yet when I try to create any kind of trust i get
> an error message:
> >
> >The operation failed. The error is: This operation cannot
> be performed on
> >the current domain.
> >
> >I have tried domain, forest, one way in/ou, and am at a
> loss. Both servers
> >are on the same subnet, same ip range, i can ping DNS and
> IP. Only one
> >account on each server, it has full admin rights to
> everything. Nothing
> >shows up in event viewer and the rather generic error
> message is of no help.
> >
> >Any suggestion?
> >
> >Thanks
> >
> >
> >Happy New Year!
> >
> >Rod
> >
> >
> >
> >
> >.
> >

Lazyadmin
Fri Jan 02 12:15:10 CST 2004

Thats the weird part, nothing! I have managed to get Realm trusts working,
but thats it.


"someguy" <anonymous@discussions.microsoft.com> wrote in message
news:073501c3d145$49a67460$a601280a@phx.gbl...
> Whats Event View say?

Consultant
Fri Jan 02 12:27:30 CST 2004

he/she may have written the book

"Lazyadmin" <rodb@dortoh.ca> wrote in message
news:OvpmEyV0DHA.2528@TK2MSFTNGP09.phx.gbl...
> Did you get that from The Idiots Guide to Windows Server Repair or think
of
> that all by yourself :)
>
>
> "Ya!" <anonymous@discussions.microsoft.com> wrote in message
> news:009201c3d14b$2c80b250$a101280a@phx.gbl...
> > I smell a RELOAD coming on!!!!
> >
> >
> > >-----Original Message-----
> > >Following the guides in my MS Press book (Upgrading your
> > Certification to
> > >Windows 2003) on creating a cross forest trust with
> > Windows 2003.
> > >
> > >I have raised the domain level and forest levels to
> > Windows Server 2003,
> > >rebooted yet when I try to create any kind of trust i get
> > an error message:
> > >
> > >The operation failed. The error is: This operation cannot
> > be performed on
> > >the current domain.
> > >
> > >I have tried domain, forest, one way in/ou, and am at a
> > loss. Both servers
> > >are on the same subnet, same ip range, i can ping DNS and
> > IP. Only one
> > >account on each server, it has full admin rights to
> > everything. Nothing
> > >shows up in event viewer and the rather generic error
> > message is of no help.
> > >
> > >Any suggestion?
> > >
> > >Thanks
> > >
> > >
> > >Happy New Year!
> > >
> > >Rod
> > >
> > >
> > >
> > >
> > >.
> > >
>
>

Marlin
Fri Jan 02 14:31:54 CST 2004



On Thu, 1 Jan 2004 16:14:20 -0600, "Lazyadmin" <rodb@dortoh.ca> wrote:

>Following the guides in my MS Press book (Upgrading your Certification to
>Windows 2003) on creating a cross forest trust with Windows 2003.
>
>I have raised the domain level and forest levels to Windows Server 2003,
>rebooted yet when I try to create any kind of trust i get an error message:
>
>The operation failed. The error is: This operation cannot be performed on
>the current domain.
>
>I have tried domain, forest, one way in/ou, and am at a loss. Both servers
>are on the same subnet, same ip range, i can ping DNS and IP. Only one
>account on each server, it has full admin rights to everything. Nothing
>shows up in event viewer and the rather generic error message is of no help.
>
>Any suggestion?
>
>Thanks
>
>
>Happy New Year!
>
>Rod
>
>
>
Is the other domain 2000 mixed mode perchance ? or even more likely
NT4? - if it is ...

Lazyadmin
Fri Jan 02 18:23:35 CST 2004

No all 2003 Enterprise, raised domain and forest to Windows 2003 level.


"Marlin (the PFY) Munrow - Remove Vroomfondle to email me"
<the_pfy@vroomfondlehotmail.com> wrote in message
news:e7lbvvcuhakuj1tfka10kilv1os6io2d4v@4ax.com...
>
>
> On Thu, 1 Jan 2004 16:14:20 -0600, "Lazyadmin" <rodb@dortoh.ca> wrote:
>
> >Following the guides in my MS Press book (Upgrading your Certification to
> >Windows 2003) on creating a cross forest trust with Windows 2003.
> >
> >I have raised the domain level and forest levels to Windows Server 2003,
> >rebooted yet when I try to create any kind of trust i get an error
message:
> >
> >The operation failed. The error is: This operation cannot be performed on
> >the current domain.
> >
> >I have tried domain, forest, one way in/ou, and am at a loss. Both
servers
> >are on the same subnet, same ip range, i can ping DNS and IP. Only one
> >account on each server, it has full admin rights to everything. Nothing
> >shows up in event viewer and the rather generic error message is of no
help.
> >
> >Any suggestion?
> >
> >Thanks
> >
> >
> >Happy New Year!
> >
> >Rod
> >
> >
> >
> Is the other domain 2000 mixed mode perchance ? or even more likely
> NT4? - if it is ...
>
>

MikeF
Sat Jan 03 12:01:39 CST 2004

Here are a few guesses re. things to check. Probably all off the mark
but might trigger a thought:

1. could it have needed a "prep" tool to be run that you might have
forgot?
2. are there any replication problems between the servers? / have they
had time to replicate?
3. same subnet = same site. could this be confusing windows? i don't
think it should, but.....
4. seems possible that the raising of the domains to 2003 did not
"take" for some reason.....
5. DNS complete and okay?

Good Luck! Let us know the answer when you figure it out.

Mike

Lazyadmin" <rodb@dortoh.ca> wrote in message
news:OyU3U$Y0DHA.3468@TK2MSFTNGP11.phx.gbl...
> No all 2003 Enterprise, raised domain and forest to Windows 2003
level.
>
>
> "Marlin (the PFY) Munrow - Remove Vroomfondle to email me"
> <the_pfy@vroomfondlehotmail.com> wrote in message
> news:e7lbvvcuhakuj1tfka10kilv1os6io2d4v@4ax.com...
> >
> >
> > On Thu, 1 Jan 2004 16:14:20 -0600, "Lazyadmin" <rodb@dortoh.ca>
wrote:
> >
> > >Following the guides in my MS Press book (Upgrading your
Certification to
> > >Windows 2003) on creating a cross forest trust with Windows 2003.
> > >
> > >I have raised the domain level and forest levels to Windows
Server 2003,
> > >rebooted yet when I try to create any kind of trust i get an
error
> message:
> > >
> > >The operation failed. The error is: This operation cannot be
performed on
> > >the current domain.
> > >
> > >I have tried domain, forest, one way in/ou, and am at a loss.
Both
> servers
> > >are on the same subnet, same ip range, i can ping DNS and IP.
Only one
> > >account on each server, it has full admin rights to everything.
Nothing
> > >shows up in event viewer and the rather generic error message is
of no
> help.
> > >
> > >Any suggestion?
> > >
> > >Thanks
> > >
> > >
> > >Happy New Year!
> > >
> > >Rod
> > >
> > >
> > >
> > Is the other domain 2000 mixed mode perchance ? or even more
likely
> > NT4? - if it is ...
> >
> >
>
>

Lazyadmin
Sat Jan 03 12:19:24 CST 2004

Well i got it to work and i think i know what the problem is/was.

This is a test lab i got 3 identical PCs. Installed it on the first and
ghosted it to the other one, and made the necessary changes and then
DCPromo'd them in their respective forest/domains. I think maye this caused
some issues because when i brought another DC online for a third forest
(with a fresh install) I am able to create a forest trust between the two
forests created from fresh installs. The ghosted install still does not
work. So I wiped the ghosted install and installed a fresh DC in a new
forest/domain and can create forest trusts.

Thats what you get for taking shortcuts I guess. Figured I would save some
time over installing it on these PIII 500's :)

Rod


"MikeF" <wallacestevens54@removethisfirstyahoo.com> wrote in message
news:OuAHnOi0DHA.2396@TK2MSFTNGP09.phx.gbl...
> Here are a few guesses re. things to check. Probably all off the mark
> but might trigger a thought:
>
> 1. could it have needed a "prep" tool to be run that you might have
> forgot?
> 2. are there any replication problems between the servers? / have they
> had time to replicate?
> 3. same subnet = same site. could this be confusing windows? i don't
> think it should, but.....
> 4. seems possible that the raising of the domains to 2003 did not
> "take" for some reason.....
> 5. DNS complete and okay?
>
> Good Luck! Let us know the answer when you figure it out.
>
> Mike
>
> Lazyadmin" <rodb@dortoh.ca> wrote in message
> news:OyU3U$Y0DHA.3468@TK2MSFTNGP11.phx.gbl...
> > No all 2003 Enterprise, raised domain and forest to Windows 2003
> level.
> >
> >
> > "Marlin (the PFY) Munrow - Remove Vroomfondle to email me"
> > <the_pfy@vroomfondlehotmail.com> wrote in message
> > news:e7lbvvcuhakuj1tfka10kilv1os6io2d4v@4ax.com...
> > >
> > >
> > > On Thu, 1 Jan 2004 16:14:20 -0600, "Lazyadmin" <rodb@dortoh.ca>
> wrote:
> > >
> > > >Following the guides in my MS Press book (Upgrading your
> Certification to
> > > >Windows 2003) on creating a cross forest trust with Windows 2003.
> > > >
> > > >I have raised the domain level and forest levels to Windows
> Server 2003,
> > > >rebooted yet when I try to create any kind of trust i get an
> error
> > message:
> > > >
> > > >The operation failed. The error is: This operation cannot be
> performed on
> > > >the current domain.
> > > >
> > > >I have tried domain, forest, one way in/ou, and am at a loss.
> Both
> > servers
> > > >are on the same subnet, same ip range, i can ping DNS and IP.
> Only one
> > > >account on each server, it has full admin rights to everything.
> Nothing
> > > >shows up in event viewer and the rather generic error message is
> of no
> > help.
> > > >
> > > >Any suggestion?
> > > >
> > > >Thanks
> > > >
> > > >
> > > >Happy New Year!
> > > >
> > > >Rod
> > > >
> > > >
> > > >
> > > Is the other domain 2000 mixed mode perchance ? or even more
> likely
> > > NT4? - if it is ...
> > >
> > >
> >
> >
>
>

Marlin
Sat Jan 03 14:45:10 CST 2004



On Fri, 2 Jan 2004 18:23:35 -0600, "Lazyadmin" <rodb@dortoh.ca> wrote:

>No all 2003 Enterprise, raised domain and forest to Windows 2003 level.
>
>
>"Marlin (the PFY) Munrow - Remove Vroomfondle to email me"
><the_pfy@vroomfondlehotmail.com> wrote in message
>news:e7lbvvcuhakuj1tfka10kilv1os6io2d4v@4ax.com...
>>
>>
>> On Thu, 1 Jan 2004 16:14:20 -0600, "Lazyadmin" <rodb@dortoh.ca> wrote:
>>
>> >Following the guides in my MS Press book (Upgrading your Certification to
>> >Windows 2003) on creating a cross forest trust with Windows 2003.
>> >
>> >I have raised the domain level and forest levels to Windows Server 2003,
>> >rebooted yet when I try to create any kind of trust i get an error
>message:
>> >
>> >The operation failed. The error is: This operation cannot be performed on
>> >the current domain.
>> >
>> >I have tried domain, forest, one way in/ou, and am at a loss. Both
>servers
>> >are on the same subnet, same ip range, i can ping DNS and IP. Only one
>> >account on each server, it has full admin rights to everything. Nothing
>> >shows up in event viewer and the rather generic error message is of no
>help.
>> >
>> >Any suggestion?
>> >
>> >Thanks
>> >
>> >
>> >Happy New Year!
>> >
>> >Rod
>> >
>> >
>> >
>> Is the other domain 2000 mixed mode perchance ? or even more likely
>> NT4? - if it is ...
>>
>>
>
Bang goes another guess...


+++++++++++++++++++++++++++++++++++++++++++
"We require rigidly defined areas of
doubt and uncertainty!"

Remove Vroomfondle to email me.
+++++++++++++++++++++++++++++++++++++++++++

Marlin
Sat Jan 03 14:46:12 CST 2004

On Sat, 3 Jan 2004 12:19:24 -0600, "Lazyadmin" <rodb@dortoh.ca> wrote:

>Well i got it to work and i think i know what the problem is/was.
>
>This is a test lab i got 3 identical PCs. Installed it on the first and
>ghosted it to the other one, and made the necessary changes and then
>DCPromo'd them in their respective forest/domains. I think maye this caused
>some issues because when i brought another DC online for a third forest
>(with a fresh install) I am able to create a forest trust between the two
>forests created from fresh installs. The ghosted install still does not
>work. So I wiped the ghosted install and installed a fresh DC in a new
>forest/domain and can create forest trusts.
>
>Thats what you get for taking shortcuts I guess. Figured I would save some
>time over installing it on these PIII 500's :)
>
>Rod
>
>
>"MikeF" <wallacestevens54@removethisfirstyahoo.com> wrote in message
>news:OuAHnOi0DHA.2396@TK2MSFTNGP09.phx.gbl...
>> Here are a few guesses re. things to check. Probably all off the mark
>> but might trigger a thought:
>>
>> 1. could it have needed a "prep" tool to be run that you might have
>> forgot?
>> 2. are there any replication problems between the servers? / have they
>> had time to replicate?
>> 3. same subnet = same site. could this be confusing windows? i don't
>> think it should, but.....
>> 4. seems possible that the raising of the domains to 2003 did not
>> "take" for some reason.....
>> 5. DNS complete and okay?
>>
>> Good Luck! Let us know the answer when you figure it out.
>>
>> Mike
>>
>> Lazyadmin" <rodb@dortoh.ca> wrote in message
>> news:OyU3U$Y0DHA.3468@TK2MSFTNGP11.phx.gbl...
>> > No all 2003 Enterprise, raised domain and forest to Windows 2003
>> level.
>> >
>> >
>> > "Marlin (the PFY) Munrow - Remove Vroomfondle to email me"
>> > <the_pfy@vroomfondlehotmail.com> wrote in message
>> > news:e7lbvvcuhakuj1tfka10kilv1os6io2d4v@4ax.com...
>> > >
>> > >
>> > > On Thu, 1 Jan 2004 16:14:20 -0600, "Lazyadmin" <rodb@dortoh.ca>
>> wrote:
>> > >
>> > > >Following the guides in my MS Press book (Upgrading your
>> Certification to
>> > > >Windows 2003) on creating a cross forest trust with Windows 2003.
>> > > >
>> > > >I have raised the domain level and forest levels to Windows
>> Server 2003,
>> > > >rebooted yet when I try to create any kind of trust i get an
>> error
>> > message:
>> > > >
>> > > >The operation failed. The error is: This operation cannot be
>> performed on
>> > > >the current domain.
>> > > >
>> > > >I have tried domain, forest, one way in/ou, and am at a loss.
>> Both
>> > servers
>> > > >are on the same subnet, same ip range, i can ping DNS and IP.
>> Only one
>> > > >account on each server, it has full admin rights to everything.
>> Nothing
>> > > >shows up in event viewer and the rather generic error message is
>> of no
>> > help.
>> > > >
>> > > >Any suggestion?
>> > > >
>> > > >Thanks
>> > > >
>> > > >
>> > > >Happy New Year!
>> > > >
>> > > >Rod
>> > > >
>> > > >
>> > > >
>> > > Is the other domain 2000 mixed mode perchance ? or even more
>> likely
>> > > NT4? - if it is ...
>> > >
>> > >
>> >
>> >
>>
>>
>
3 ghosts turned into DCs *would* cause issues

good catch all the same
+++++++++++++++++++++++++++++++++++++++++++
"We require rigidly defined areas of
doubt and uncertainty!"

Remove Vroomfondle to email me.
+++++++++++++++++++++++++++++++++++++++++++