When you are trying to create an explicit shortcut trust or an NTLM trust to an NT domain, the process might fail. Here are several issues to look for:
Network—
Look for the obvious. Routing, addressing, and name resolution must be in place for trusts to work. Also, Kerberos trusts require an IP connection. If you can't ping the target domain controller by name, you probably won't be able to create a trust to it. Permissions—
Although, as shown in this chapter's example of creating a shortcut trust, you do not have to be logged on as a member of the Enterprise Admins group; doing so will cancel a number of permissions issues. Time— Kerberos is time sensitive. If ...
|