Contoso Forest: - DFL:Windows Server 2003 - FFL:Windows 2000 - 2 Windows Server 2003 DCs with DNS, 1 Exchange 2007 - Set DNS forwarder for "Fabrikam.com" - ping fabrikam.com - successful - ping dc01.fabrikam.com - successful Fabrikam Forest: - DFL:Windows 2000 native - FFL:Windows 2000 - 3 Windows Server 2008 DCs with DNS, 2 Exchange 2007 - Set forwarder for "Contoso.com" - ping contoso.com - successful - ping dc02.contoso.com - successful I used administrator account to create a trust relationship. The trust relantiohip is successfully created as below: Trust type: External Transitive: NO When i tried to validate the trust, it will appeat meesage The secure channel (SC) reset on domain controller \\dc02.contoso.com of domain contoso.com to domain fabrikam.com failed with error: There are currently no logon servers available to service the logon request. The incoming trust was successfully validated. Please advice

Do you have proper name resolution? Also, look at the following links: http://www.eggheadcafe.com/forumarchives/windowsservermigration/Jun2005/post23149670.asp http://support.microsoft.com/default.aspx/kb/246264?p=1 Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+ Houston, TX http://blogs.sivarajan.com/ http://publications.sivarajan.com/ This posting is provided "AS IS" with no warranties, and confers no rights.

today i rebuild the trust relationship on different server. Magically, i'm able to verify the trust relationship. 1. Set up DNS forwarder between domain 2. Make sure source domail able to ping and solve FQDN target domain and vice-versa 3. Create 2 ways trust relationship 4. verify the trust