IPsec problem

[Edin Dazdarevic]

i have two domains station.ba and test.ba
dc1 is DC for station.ba
dc2 is DC for test.ba
trust relationships are enabled and configured
users form station.ba domain must be able to log on the
test.ba domain from dc1

IPsec (Server (Request)) is enabled on both dc1 and dc2

i have figured out that to configure this i must enable
log on localy user-right to users (groups) from station.ba
domain on the dc2
but when i try this i get error. error description does
not say much, it just say Unspecified error occurred


i hope you understand the problem because english is not
my native langauge
Thanks in advance.


Edin Dazdarevic

 

[Mark Swift [MSFT]]

Hi Edin, thanks for your post.

The default policies that come with the OS specify Kerberos as the
authentication method. To protect traffic between 2 DC's you are going to
need a different authentication method. See this article for more details:

http://support.microsoft.com/default.aspx?scid=kb;en-us;254949

http://support.microsoft.com/default.aspx?scid=kb;en-us;254728