Article ID: 295335 - View products that this article applies to.
This article was previously published under Q295335
You may be unable to establish a trust relationship between a Windows NT domain and either a Windows 2000 domain or a Windows Server 2003 domain. When you try to add the trust from the Windows 2000 domain, you may receive the following error message:
When you try to add the trust from the Windows Server 2003 domain, you may receive the following error message:
The trust cannot be created because no mapping between account names and security IDs was done.
When you attempt to add the trust from the Windows NT domain, you may receive the following error message:
Cannot Continue. The trust relationship cannot be created because the following error occurred: The operation failed. The error is: The specified user already exists.
You may receive an event 5721 (session setup failed) in the event log when you try to establish the trust.
The trust relationship could not be verified at this time.
This behavior can occur because the "Internet" domain name cannot be accessed. This domain name is a restricted name and it cannot be used for either a domain name or a computer name.
Although you can name a Windows computer or domain "Internet", you cannot establish a trust to a domain named "Internet" from Windows 2000.
To work around this behavior, do not use restricted names for computer names or domain names.
To facilitate access to a domain named "Internet" if the domain (or computer) already exists and it cannot be rebuilt:
(http://support.microsoft.com/kb/266633/ )"Computer name is already in use" error message when you add user names in Windows 2000
Article ID: 295335 - Last Review: March 1, 2007 - Revision: 2.4