Authentication needed after doing trust between two different domains.

Hi There,
I have a problem when i did the trust relationship between two different domains in two different forests ,,in the trust relationship steps all working two ways trust,with external trust,stub zone created on both domains and they are validated in both sides
,,my problem is with the objects it can't be retrieved from side and it can be from the other side . For instance :
NY domain can get the users and computers of 2012DC1 
but 2012DC1 can't get the users and computers of NY
Date and time are the same,i am always getting this error 
The session setup from computer '2012DC1' failed because the security database does not contain a trust account 'test.com.' referenced by the specified computer.  
USER ACTION  
If this is the first occurrence of this event for the specified computer and account, this may be a transient issue that doesn't require any action at this time.  If this is a Read-Only Domain Controller and 'test.com.' is a legitimate machine account
for the computer '2012DC1' then '2012DC1' should be marked cacheable for this location if appropriate or otherwise ensure connectivity to a domain controller  capable of servicing the request (for example a writable domain controller).  Otherwise,
the following steps may be taken to resolve this problem:  
If 'test.com.' is a legitimate machine account for the computer '2012DC1', then '2012DC1' should be rejoined to the domain.  
If 'test.com.' is a legitimate interdomain trust account, then the trust should be recreated.  
Otherwise, assuming that 'test.com.' is not a legitimate account, the following action should be taken on '2012DC1':  
If '2012DC1' is a Domain Controller, then the trust associated with 'test.com.' should be deleted.  
If '2012DC1' is not a Domain Controller, it should be disjoined from the domain.
Can you please help me in this error.
Thank You in advance.

Hello,
"The session setup from computer '2012DC1' failed because the security database does not contain a trust account 'test.com.' referenced by the specified computer. "
This belongs to the machine 2012Dc1 in test.com and not to the other domain from your trust. Seems for me that you mix the trust with the problems of the machine 2012DC1 in test.com.
In this error message 2012DC1 has lost the trust to its OWN domain and therefore you have to find the reason. How exactly was this machine installed?
Or was there a restore on that machine from not supported type of backup like image/clone/snapshot?
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://blogs.msmvps.com/MWeber
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Twitter:  

Similar Messages

  • Two-way forest trust between two (single domain) forests with multiple identical user ID's

    Domain and forest levels - Windows 2003 (they both have one 2008 R2 DC)
    We need to create a two-way forest trust between two separate single-domain forests. The problem is that these two forests already access each others resources through a S2S. Users have the same login names and passwords on both forests/domains. Now, we
    are combining their infrastructures and need to set up a trust. From what I'm reading, you can't create forest trusts if you have the same SIDs, user ID's, or computer name in each of the forests.
    I'm looking into AD migration tool to copy the userSIDs (SID history?) between forest/domain, deleting the user ID's in the domain we migrated from, and then setting up the trust, but I'm leery about doing it this way as there is no easy 'recovery' should
    something go wrong. 
    Any suggestions for the easiest way to setup this forest trust?

    Hi,
    To eliminate your worries, two user accounts have the same user name doesn’t mean that they have the same SID. Moreover, the user’s SID remains the same even after it has been renamed.
    The SID for domain account/group consists of a
    Domain Identifier and a Relative Identifier. Domain Identifier is unique in every domain within a forest, and a Relative Identifier is unique within domain. It is unlikely that two user accounts with or without the same account
    name from two forests have the same SID.
    The Technet article you mentioned is talking about duplicate SIDs instead of “duplicate computer name or user account”, I will submit a change request to Microsoft about this.
    If there are duplicate SIDs when you create forest trust, you need to delete one of them as the article guides.
    Here are some related articles below for your references:
    How Security Identifiers Work
    http://technet.microsoft.com/en-us/library/cc778824(v=WS.10).aspx
    Security Identifier Structure
    http://technet.microsoft.com/en-us/library/cc962011.aspx
    Security Identifier
    http://en.wikipedia.org/wiki/Security_Identifier
    I hope this helps.
    Amy Wang

  • How to build transitional replication on two different domain servers in SQL server 2012 ?

    Hi All,
    We have to build transnational replication with updatable  subscribers between two different domains .
    Is it possible ,if it's possible please share the any document or process .....
    Thanks in advance. 
    RAM

    Yes this is possible.
    Replication across two non-trusted domains or workgroups can be done by using Windows Authentication by configuring
    pass-through authentication.
    Create a local Windows account on both the Publisher and Subscriber that has
    the same username and password. Use this account for the Merge Agent process account and have the connections to the publisher and distributor impersonate the agent process account. Ensure the account has the permissions required in
    Replication Agent Security Model.
    This approach is covered in the section Use Windows Authentication to Set Up Replication Between Two Computers Running SQL Server in Non-Trusted Domains in
    HOW TO: Replicate Between Computers Running SQL Server in Non-Trusted Domains or Across the Internet.
    Another approach to configure replication between non-trusted domains is to use SQL authentication for cross domain connections.
    Brandon Williams (blog |
    linkedin)

  • I would like the share an iTunes library between two different accounts on one Mac. How do I do this?

    iTunes no longer works properly (aka at all) while using one of the user accounts set up on my iMac. It does, however, work when logging in under another user account on the same iMac. (if any of you can help me solve this issue that would be perfect). If there is no solution can anyone help with my request to share an iTunes library between two different accounts on one Mac. How do I do this?

    jc_hering wrote:
    that works for anything he purchases after he creates the new account.  What about his current music that currently resides in my itunes library?  How can I get his current music out of my library into his new account/library??  Thanks..
    Copy it to his computer into his iTunes library and authorize his computer with the iTunes account used to purchase them..
    You cannot tranfser items from one iTunes account to another. Purchased items remain part of the iTunes account is was purchased with.
    iTunes account - used to purchase items
    iTunes library - where purchases (and CD RIPs) go on the computer

  • How to transfer app data between two different game center accounts?

    Hello, I really need some help.
    I have looked all over the web for ways to transfer apps between two different game center accounts and different devices. Several weeks ago I started playing Campus Life on my relative's Ipad 2, therefore spending many long hours to get to this point in the game.
    The problem is I just got an Iphone 5 and I really would like to transfer the data onto it, so that I would not need to start all over again.
    My grandma has an account (Game Center) onto which the data has been saved and I would like to have it stored onto mine. On some forum someone said to sign into the account which has the data on both devices and to then open up the game on the new device. It worked. Then I signed out and logged in with my own account- the game started from scratch. I panicked. I went back on the other account, and the data reappeared. I have been going back and forth, the game changing as many times. I thought it would ask to back up my grandma's data on mine but I was wrong. I can not seem to save the game onto my new account, and I have even tried to back it up to Itunes and then copy it onto my phone after having signed into my own account. And I don't know how to properly use Icloud. I am a mess. I am completely lost and have found no help on the web. (All people seem to have to deal with is sharing Apple IDs with different Game Center Accounts for the kids and transferring apps from one of their devices to another.)
    I am so worried I am going to mess up and will lose the whole thing completely.
    I have just started another game with my own account but since I am using my grandma's, the data is erased. It's one or the other but I definitely prefer saving Campus Life. I do not like the idea of having to only pick one.
    I do not know any technical terms, so if you understand or even have the slightest clue about what I am talking about, I applaud you.
    This seems like mission impossible, so if anyone can help in any way, I would be really grateful. 
    Thanks in advance for your time and thoughts!

    I meant to press on "This solved my question"... Sorry if you needed the points.
    Thank-you and I will just go back and forth between the accounts.

  • Swap between two different item categories in sales orders for sub-contracting

    Dear gurus,
    my requirement is to have the ability to swap between two different item categories for sales orders for sub-contracting.
    This should be controlled by a combination of the material and a value maintained the Usage field in the Customer Material Info Record (for example by entering a ‘V’).  A combination of Sales Doc Type, Item Cat Group and Usage should result in the creation of a purchase requisition.
    In the event that a process order is required instead of a purchase requisition (i.e. the product is to be manufactured in-house instead of sub-contracted) the user must have the ability to change the Item Category within the sales order to produce a process order.
    The user would just change the item category within the sales order, and the system would automatically remove the purchase requisition assigned to the SO, and create a process order and assign it to the SO.
    Can you suggest any possible solution?
    Thank you in advance.

    Hi Majlo,
    In my system, I checked.  First created sales order with third party line item and then changed item category to normal item category.
    Till Purchase order not created, I can change Item category of my sales order line item.
    In this case SAP inform by log and once save delete purchase requisition of that line item .
    For this you need to assign another item category as an manual item category in SPRO Item category assignment.
    After this user can manually change item category to other one manually, if PO do not exist.
    Please let me know if your query is different.
    Regards

  • Need to eliminate Space between two Pivot table view  in OBIEE 11g

    Hi,
    I have a requirement to eliminate space between two pivot table views. In a single report I have two Pivot table with two different column, I placed both of them one after another, but I need to eliminate the space between two pivot table views as if it should show as a single pivot table in OBIEE 11g.
    Could anyone please let me know how I can do this in OBIEE 11g?
    Thanks in Advance
    Anirban Mitra

    If I create narrative view it will be another view. And if I put that in between that two pivot view, it will show the space. I need to remove space between two pivot table within a single report so that it can appear as a single pivot view.
    Thanks

  • How to create Trust between two domain

    How to create Trust between two domain:
    please help

    Hi,
    By default, two-way, transitive trusts are automatically created when a new domain is added to a domain tree or forest root domain using the Active Directory Installation
    Wizard. The two default trust types are defined in the following table. However there have others many types of the AD trust, please refer the following KB to determine which type you need:
    Trust types
    http://technet.microsoft.com/en-us/library/cc775736%28v=ws.10%29.aspx
    More relate KB:
    Creating Domain and Forest Trusts
    http://technet.microsoft.com/en-us/library/cc740018(WS.10).aspx
    The related third party article:
    How to configure Forest Level Trust in Windows Server
    http://blogs.interfacett.com/how-to-configure-forest-level-trust-in-windows-server
    *** This response contains a reference to a third party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control
    these sites and has not tested any software or information found on these sites; therefore, Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. There are inherent dangers in the
    use of any software found on the Internet, and Microsoft cautions you to make sure that you completely understand the risk before retrieving any software from the Internet. ***
    Hope this helps.
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • How can I interact between two different frames in the same indesign template as well as from one template to another.

    I am looking for the best way (or any way) to interact between two different frames in the same indesign template as well as from one template to another. It's for a DPS app which needs to carry some button initiated data from one page to another and then present it in a table.

    There is no simple way to do it, as itunes wont let you use it on another computer without wiping the contents first.
    However if you really want to transfer songs to another computer then you could try this;
    * make sure that your ipod is accessible as a disk drive (ipod options)
    * when you plug your ipod into the computer you want to transfer to make sure you select "no" or "cancel" when it asks to wipe the contents. Leave the ipod connected and quit from itunes.
    * go to "my computer" and access the ipod directly. You probably have to select "view hidden files" from windows. You will see a lot of folders with odd names like ZX838aff with similar named files inside.
    * copy these files to a folder on your computers hardrive. Now remove the ipod and start itunes.
    * import the files from the folder you made in the last step.
    * Now your music is on itunes, but with unrecogisable names.
    This is the only way I have found to do it, but there may be another way, say with an application to do the hard work for you.
    Generic homebuild PC Windows XP
    Generic homebuild PC   Windows XP  

  • How to route traffic between two different interfaces

    Hi,
    I need to setup a routing between two different interfaces on a host.
    Inferface ce1 : 192.168.120.12
    Inteface ce2 : 192.168.110.50
    Is it possible to add a route which enables the ce2 interface to catch packets from the ce1 interface ?
    Regards,
    Armin

    The problem is a application which is only able to listen on one interface.
    To fix this, I have to make all packages visible on one interface.

  • Outbound Delivery created between two different Storage Bins

    Dear Guru ,
    Using WM can I create an SD Outbound Delivery between two different storage bins linked to the same storage location ?
    Thanks

    Hi,
    Between storage bins only transfer posting is possible as per my understanding.

  • How do I Sync my itunes music between two different computers

    Can anyone tell me the step-by-step instructions for how to Sync my itunes music between two different computer.... one Mac at work and a second at home. I want to bring over all my work music onto my home Mac, some of which is the same but much of it is different.

    Are you able to connect the two computers in any way? For instance is the work computer a laptop that you can bring home and network with your personal one? If the two devices are connected in some away there are a few utilities that can help you sync iTunes across different computers. You could begin your research by having a look at these for instance:
    TuneRanger
    SuperSync
    syncOtunes

  • Use of SAP memory to transfer data between two different sessions.

    Hello experts,
    I wish to know how to use SAP memory to transfer data between two different sessions.
    The scenario is that when I run a report and change a variable, the value of changed variable should be availabe to another user on another terminal.
    Thanks & Regards!
    Sumit

    Hello,
    Just to add what Max has already mentioned. IMPORT TO / EXPORT FROM DATABASE statements can be used to store data in special "cluster" tables (you can't use any DDIC table) e.g., INDX.
    @OP: You can opt for Shared Memory(SHM) for this specific requirement as well. In my opinion SHM is a bit tricky to code, but it is easier to monitor. The opposite holds true for "data clusters".
    You should remember SHM is app-server specific. So if you've a load balancing scenario, using SHM can cause problems.
    Hope i'm clear.
    BR,
    Suhas
    Edited by: Suhas Saha on Nov 19, 2010 4:12 PM

  • HT204053 Is it possible to sync calendars between two different users?

    Is it possible to sync calendars between two different users?

    Hi
    Installing the drive into the older machine may work, you WILL get a lot of driver errors and the unit may even fail to boot. The other problem is that the drives may not be compatable, the drive in the broken PC is a SATA drive, older PCs had IDE drives with very different connectors.
    Your best option is to do as you suggest and obtain a USB caddy and extract the data that way.
    Make sure that the caddy you get will support SATA drives (all new ones will).
    Although I am an HP Employee, all views expressed are my own and are not on behalf of HP
    Regards
    Ty
    **Click Accept as Solution on a Reply that solves your issue to help others who are searching**

  • How to use 'UNION' between two different databaseservers

    Hello,
    Could someone help me out. I am trying to find out if and how to use 'UNION' between two different databaseservers.
    We have 2 different queries, each queries on a different database; one MySQL the other MSSQL.
    Could someone tell me how to use 'UNION' between thes 2 queries?
    Thanks in advance,
    Samir Benalla

    Hello
    You may use openrowset statement, (OPENROWSET (Transact-SQL))., but before you use this, you must configure your server
    sample:
    SELECT a.*
    FROM OPENROWSET('SQLNCLI', 'Server=Seattle1;Trusted_Connection=yes;',
         'SELECT GroupName, Name, DepartmentID
          FROM AdventureWorks2012.HumanResources.Department
          ORDER BY GroupName, Name') AS a
    UNION
         SELECT GroupName, Name, DepartmentID
          FROM AdventureWorks2012.HumanResources.Department
          ORDER BY GroupName, Name
    With this you can define a connection using native client to server Seattle1, and execute a query there, The results will be spooled on your server.
    Connectionstring
    Server=[SERVER_NAME];datasource=[YOUR DATABASE NAME];user_id=sa;password=sapassword'
    if you use FQDN on your Query, than the datasource parameter in connection string can be letf out.
    Regards
    János.
    take care of performance, it can be very slow,

Maybe you are looking for

  • Issue while creating a enhancement window with Interface enabled check

    Hello everyone, i have a standard webdynpro component "fmca_wdy_return" to enhance. The component is one the applications configured in floor plan manager "FPM_OIF_COMPONENT". we have created a tab on the FPM view and we need to configure the wda com

  • Importing Movie Clips from External Hard Drive

    Apologies if this has been answered elsewhere... I use my Sony SD card camcorder to save in AVCHD. I can import clips through iMovie to an external HD for editing etc. No problems. I want to know if rather than importing through iMovie, I can copy my

  • VZW or someone help please?

    December 2013 when I signed up for Verizon, I was told about edge and that 12 months in I could choose any phone I wanted to Edge up to as long as my account was straight. It is. Well a year(12 months) has come and gone by a few days now, and I am on

  • Constrain ratio

    In Illustrator CS2 holding down the shift key whilst resizing an object no longer constrains the proportions of the object. Does anybody know why?

  • JSF + CeWolf + Java Studio Creator 2 (How to integrate)

    New to JSF, JSP and Studio Creator Problem is how to do graphics in JSF using Studio Creator. The best solution I can find is to incorporate CeWolf or it's base, JFreeChart into JSF. I've seen some posts on this, but none under the context of Studio