When Trusting

[Rick]

I have attempted on several occasions to enable a trust
relationship so that a Windows 2000 domain trusts a
Windows NT 4.0 Domain.

When I verify the trust I get a Secure Channel Error:

The security database on the server
does not have a computer account for this workstation
trust relationship.

Anyone got any ideas or solutions? The only thing I
havn't tried is bouncing the NT4 Domain PDC

 

[Cary Shultz [MVP]]

-----Original Message-----
I have attempted on several occasions to enable a trust
relationship so that a Windows 2000 domain trusts a
Windows NT 4.0 Domain.

When I verify the trust I get a Secure Channel Error:

The security database on the server
does not have a computer account for this workstation
trust relationship.

Anyone got any ideas or solutions? The only thing I
havn't tried is bouncing the NT4 Domain PDC
.

Rick,

I assume that you are trying to create the Trust between
the WINNT 4 domain and the WIN2000 AD Domain by using the
ADDT MMC? That is generally the prescribed way but
sometimes it just does not work. You can do everything
by the book perfect yet it will not work! I have
excperienced that a few times.

Anyway, thank God for the Support Tools and NETDOM.
Install the Support Tools on the WIN2000 Domain
Controller and use NETDOM to create the Trust. This will
indeed work even when the ADDT MMC does not!

Just for good measure, please take a look at the
following MSKB Articles:

How to build a Trust using the CLI:
http://support.microsoft.com/default.aspx?scid=kb;EN-
US;175025

How to establish WINNT 4 - WIN2000 Trusts:
http://support.microsoft.com/default.aspx?scid=kb;en-
us;308195&Product=win2000

For Determinig Trust Relationships:
http://support.microsoft.com/default.aspx?scid=kb;en-
us;228477

How to Configure a Firewall for Trusts:
http://support.microsoft.com/default.aspx?scid=kb;en-
us;179442&Product=win2000

HTH,

Cary

PS I assume that you have a properly configured LMHOST
file in both domains!