Setting up a trust between two domains running Windows Server 2016

Donate Us : paypal.me/MicrosoftLab

Setting up a trust between two domains running Windows Server 2016

1. Prepare

DC21 : Domain Controller ( pns.vn ), IP 10.0.0.21 | WIN1091 : Domain Member ( pns.vn ), IP 10.0.0.91

DC22 : Domain Controller ( pnj.vn ), IP 10.0.0.22 | WIN1092 : Domain Member ( pnj.vn ), IP 10.0.0.92

2. Step by step : Setting up a trust between pns.vn and pnj.vn

DC21 : Configure Conditional Forwarders in DNS

Server Manager - Tools - DNS - DC21 - Right-Click Conditional Forwarders - New Conditional Forwarders...

DNS Domain : pnj.vn , IP Addresses of the master servers : 10.0.0.22 - OK

Start - cmd - Ping pnj.vn  === OK  # Test resolve DNS queries

DC22 : Configure Conditional Forwarders in DNS. Do the same DC21 with DNS Domain : pns.vn, IP Addresses : 10.0.0.21

DC21 : Configure trust with pnj.vn

Server Manager - Tools - Active Directory Domains and Trusts - Right-click pns.vn - Properties - Trusts tab - New Trusts...

Name : pnj.vn - Trust Type : Choose "Forest trust" - Direction of Trust : Choose "Two-way" - Sides of Trust : Choose "This domain only"  

Outgoing Trust Authentication Level : Choose "Forest-wide authentication" - Trust Password : Type password and confirm

Confirm Outgoing Trust : Choose "Yes, confirm the outgoing trust" - Confirm Incoming Trust : Choose "Yes, confirm the incoming trust" - Finish

DC22 : Configure trust with pns.vn. Do the same DC21 with Name : pns.vn, confirm using PNS\administrator

WIN1091 : Create, share a folder name DATA_PNS, assign permission for HiepPNJ ( belong pnj.vn )

WIN1092 : Create, share a folder name DATA_PNJ, assign permission for HiepPNS ( belong pns.vn )

WIN1091 logon using HiepPNS test access to DATA_PNJ

WIN1092 logon using HiepPNJ test access to DATA_PNS