Windows Trusts.

  • Thread starter Thread starter Ray
  • Start date Start date
Neither!

I would use NETDOM to do this. When you have a down-level situation ( WINNT
4.0 and WIN2000 ) you should consider using NETDOM ( from the WIN2000
Support Tools - located either on the WIN2000 Server CD or on the WIN2000
Service Pack CD in the Support | Tools folder ). If you use the Active
Directory Domains and Trusts MMC it will probably work - but possibly not.
Even if you do everything correctly it *could* fail and you would spend a
whole lotta time trying to figure out why. I have seen this myself. You
need to make sure that your LMHOSTS file is correct. Spacing is important.

I recently posted a response to a similar question. I will simply copy and
paste from that:


Here are the two LMHOSTS that you will need as well as the syntax for netdom
when creating the trusts:

=======================================================================
LMHOSTS file on the WINNT PDC: 192.168.1.30 "MY2KDOM \0x1B"
#PRE
LMHOSTS file on the WIN2K DC: 172.16.15.30 "MYNT4DOM \0x1B"
#PRE

NETDOM syntax:
netdom trust mynt4dom /D:my2kdomaim.com /User0:NTAdministrator
/Password0:PasswordNT /UserD:2KAdministrator /PasswordD:Password2K /add
/twoway
============================================================================

If you want more details then look for a posting from ZIA on 03/03/2004
entitled "Trust Relationship between NT and W2K".

BTW - ADMT ( or Active Directory Migration Tool ) has nothing to do with
initially setting up the Trust. You would use it AFTER you have already
created the Trust to then migrate users and computers and groups. ADMT v2
allows you to migrate passwords as well....The Destination Domain (
WIN2000 ) needs to be in Native Mode.

HTH,

Cary
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top