Create a trust relationship between the Win2003 domain and the Win2008 domain, Active directory family 18

Today we replace an experimental scene, which is shown in the following diagram. One is the Win2003 domain and the other is the Win2008 domain. Two domains use their own domain controllers to provide DNS resolution, and the functional level of the Win2008 domain is Win2003, and we will show you how to create a trust relationship between the two domains.

The key to this experiment is dns!. Operating system differences are not important, and Win2008 domains can create trust relationships with Win2003 domains and even Win2000 domains. We want to be aware of DNS settings, where each domain controller ensures that the DNS server that it uses resolves not only the SRV records for this domain, but also the SRV records that have their own trust domain, which means that the DNS server resolves the SRV records for both the trusting and trusted domains. How do I get each DNS server to parse two domain SRV records? We have a variety of technologies to choose from, such as secondary zones, stub areas, private roots, or forwarders. In this experiment we use secondary zones to solve this problem, create a secondary zone on each DNS server for each other, so that the DNS server can parse two domains.

We show you how to create a itet.com secondary zone. First we set up in the Server1-responsible itet.com zone to allow Server2 to create itet.com secondary zones. Open DNS Manager on Server1, as shown in the following illustration, right-click the Itet.com area and select Properties.

Switch to the Zone Transfer tab in the zone properties, as shown in the following illustration, check "Allow zone transfer", select "Allow only to the following servers", and click the "Edit" button.