View Categories

Why am I not able to set up a two-way trust with another Active Directory domain?

< 1 min read

Before creating a two-way trust, it is essential to understand the needs of your Active Directory structure and the needs of the associated organization. The following steps may need to be taken:

  1. Verify Active Directory Topology:
    Ensure that all domains and forests contain at least one Global Catalog Server (GCS).

  2. Check DNS Settings:
    Confirm that all domains are properly configured with DNS and accessible from the other domain.

  3. Verify Name Suffix Routing:
    Determine if name suffix routing is configured for the domains, forests, or both.

  4. Set Trust Direction:
    There are three possible trust directions, one-way, two-way, and forest-wide.

  5. Enable Domain-Wide Authentication:
    Configure the trust to accept domain-wide authentication from the other domain.

Powered by BetterDocs