Domain Locator Across a Forest Trust

re: Domain Locator Across a Forest Trust

NedPyle [MSFT] — Wed, 24 Feb 2010 16:57:22 GMT

You're out of them.

re: Domain Locator Across a Forest Trust

ibabeu — Wed, 24 Feb 2010 16:21:52 GMT

Ok, so if you can't match the site names, it's an external trust, and are using DNS forwarding (so you can't simply put up a stub domain) what are your options?

re: Domain Locator Across a Forest Trust

timmay — Fri, 22 May 2009 23:10:29 GMT

This article does a great job of explaining authentication between domains using a forest trust.

I'm trying to fix slowdowns when the trust is between domains with no forest trust, i.e. External.

We see the same behaviour as above in our traces but the trusted domain controllers are not accessible to members of the resource domain. DNS is available because the trusting domain DCs are forwarding the requests through. In the end the devices in the trusting domain spend a good deal of time, ~20 sec, trying to contact DCs in the external trusted domain for Kerberos authentication. Only when they fail entirely will go to their own DC.

re: Domain Locator Across a Forest Trust

Michael Hildebrand - MSFT — Tue, 07 Oct 2008 15:58:51 GMT

Great info on a real-world issue - 'how to effectively use multiple forests?' Great work, bloggers!

re: Domain Locator Across a Forest Trust

NedPyle [MSFT] — Mon, 29 Sep 2008 15:54:22 GMT

Great catch bday! That has been fixed.

- Ned

re: Domain Locator Across a Forest Trust

Brian Day [MSFT] — Fri, 26 Sep 2008 06:52:22 GMT

Great post, it really makes it nice and clear to understand and fix.

One quick comment though on this paragraph;

BEGIN_SNIP

The DNS server's response to the above request includes a resource record for every domain controller in the user's domain. Since the client receives the list of domain controllers in no particular order this result is usually the cause as to why the domain controller locator does use the closest domain controller for authentication.

END_SNIP

...shouldn't it say "does not use" in the second sentence?

Domain Locator Across a Forest Trust

Domain Locator Across a Forest Trust — Thu, 25 Sep 2008 13:28:53 GMT

PingBack from http://www.ditii.com/2008/09/25/domain-locator-across-a-forest-trust/