Windows Sever 2008 R2 Trust Issue

active-directorywindows-server-2008-r2

I am currently running my network over a Cisco Meraki site to site VPN network. I currently have 4 sites, and all sites are connected to the site to site VPN and working without issue.

I am trying to setup a domain trust with one of my sites but for whatever reason when I try to setup the trust with the 4th location it wont connect telling me that "The operation failed. The error is: The specified account already exists."

I have looked in the active directory to see if either of the server names are in each others active directory and I do not see them (I have even searched for it and no luck). I have conditional forwarders setup for each of the sites. I have done a decent amount of googling on this issue and cant seem to find any resolution. I am hoping that someone else has experienced this issue and can explain to me how to resolve the issue.

To recap:

  1. I have 4 sites that are all connected to a site to site vpn (working flawlessly)

  2. I am trying to create a domain trust with a specific server

  3. 3 of the 4 domain trusts connected to this server without issue

  4. I have setup the conditional forwarders inside of DNS for all the servers. ( I have also setup each server as a forwarder in DNS properties)

  5. Getting error "The operation failed. The error is: The specified account already exists."

  6. The server OS is Server 2008 R2

Hopefully I didnt leave out any information needed, but if I have, please ask and I will provide it.

Best Answer

  1. check If netbios domain names of all the domains involved are unique
  2. check functional level. Maybe the last one is operating its forest/domain in w2k mode ?
  3. **check if You do not have by mistake something like this:
    • domainA.local {Netbios domainA} <-trust_You_try_to_establish-> domainB.local {Netbios domainB}
    • but unfortunatly in domainA You have a computer with name "domainB". (or vice versa)
    • search objects with these names in both domains.**
  4. check if one of domain name is not on this list : http://support.microsoft.com/kb/266633 however it applies to w2k - w2k3 but who knows.
  5. try to create a one way trust -> see if it works in one direction ?

the root cause has been marked BOLD. Searching one of the domains a computer with same name as the other domain netbios name was found.

Related Topic