Half of Trust Moved to Different Subnet

Well, I had a working trust relationship between NT4 and W2K, but after I changed the W2K servers IP addresses to a different subnet the trust stopped working even after configuring the routers and what-not

I changed the LMHOSTS of the NT4 PDC to use the new IP addresses but I'm at a loss of what else needs to be done, but here is what I can do so fa

NBTSTAT -c on the NT4 PDC shows

W2KDOMAIN <1C> GROUP 192.168.1.163 -
W2KDOMAIN <1B> UNIQUE 192.168.1.163 -
W2KDC <03> UNIQUE 192.168.1.163 -
W2KDC <00> UNIQUE 192.168.1.163 -
W2KDC <20> UNIQUE 192.168.1.163 -

NETDOM QUERY /Domain:W2KDOMAIN PDC shows

Primary domain controller for the domain

W2KD
The command completed successfully

TRACERT W2KDC shows

Tracing route to WIN2KDC [192.168.1.163
over a maximum of 30 hops

1 <1 ms <1 ms <1 ms 192.168.0.20
2 7 ms 5 ms 5 ms 192.168.1.20
3 8 ms 5 ms 4 ms WIN2KDC [192.168.1.163

Trace complete

The problem occurs when I try to verify the trust relationship using NETDOM TRUST W2KDOMAIN /domain:NT4DOMAIN /verify. I get this message

The secure channel verify on domain controller \\W2KDC for trusting domai
NT4DOMAIN failed with the following error

There are currently no logon servers available to service the logon request

The attempt to contact the NetLogon service on domain controller \\NT4PD
for a secure channel query of trusting domain failed with the following error

The specified domain either does not exist or could not be contacted

The command failed to complete successfully

Performing NETDOM VERIFY NT4PDC /domain:W2KDOMAIN returns

The secure channel from CVITKO01 to the domain PAYROLL has been verified. The connectio
is with the machine

The command completed successfully

Does anyone have any ideas on how to get this trust working again? It would be appreciated. Thanks.

Just to be sure there wasn't some residual effect I removed the existing trust and recreated it

Now when I query both sides of the trust I get these results

C:\>netdom query /domain:w2kdomain trus
Direction Trusted\Trusting domain Via domain Statu

========= ======================= ========== =====

<-> NT4DOMAI
The command completed successfully

C:\>netdom query /domain:nt4domain trus
Direction Trusted\Trusting domain Trust typ
========= ======================= =========
<-> W2KDOMAIN Downleve
The command completed successfully

But My Network on the W2KDC doesn't show the NT4DOMAIN, and Network Neighborhood on the NT4PDC doesn't show the W2KDOMAIN

What am I missing?

"Andrew Hayes" <(E-Mail Removed)> wrote in message
news:C6B2E3B9-8BB8-4C08-991D-(E-Mail Removed)...
> But My Network on the W2KDC doesn't show the NT4DOMAIN, and Network
> Neighborhood on the NT4PDC doesn't show the W2KDOMAIN.

There is no relationship between the Trust working and Net'Hood listing the
computers. There is also no relationship between being able to access a
machine and wether or not it shows in Net'Hood. Both the Trust and the
Network Access will work perfectly fine without anything showing in
Net'Hood.

Net'Hood works by simply listing the computers stored in a "browse list" on
the "master browser". The master browser builds the list via
broadcasts,...and broadcasts do work across subnets because they can't cross
routers. You need to run a WINS Server and have all machines have it listed
in their Network Settings. It will take time for the "browse list" to update
and rebuild.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com