Before creating a two-way trust, it is essential to understand the needs of your Active Directory structure and the needs of the associated organization. The following steps may need to be taken:
- Verify Active Directory Topology:
Ensure that all domains and forests contain at least one Global Catalog Server (GCS). - Check DNS Settings:
Confirm that all domains are properly configured with DNS and accessible from the other domain. - Verify Name Suffix Routing:
Determine if name suffix routing is configured for the domains, forests, or both. - Set Trust Direction:
There are three possible trust directions, one-way, two-way, and forest-wide. - Enable Domain-Wide Authentication:
Configure the trust to accept domain-wide authentication from the other domain.