HOW TO: Create a Trust Between a Windows 2000 Domain and a Windows NT 4.0 Domain

Article translations Article translations
Article ID: 306733 - View products that this article applies to.
This article was previously published under Q306733
Expand all | Collapse all

On This Page

SUMMARY

This article describes how to create a trust between a Windows 2000 domain and a Windows NT 4.0 domain. The creation of a trust between a Windows 2000 domain and a Windows NT 4.0 domain is similar to establishing a trust between two Windows NT 4.0 domains. When you establish a trust relationship between two domains, users in one domain can obtain access to resources that are located in another trusted domain. In this article, the Windows 2000 NetBIOS domain name is "W2KDOMAIN," and the Windows NT 4.0 NetBIOS domain name is "NTDOMAIN". Note that NETBIOS name resolution must be used to enable trust between the two domains.

Create a Two-Way Trust

To create a two-way trust between a Windows 2000 domain and the Windows NT 4.0 domain:
  1. On the Windows 2000 domain controller (DC), click Start, point to Programs, point to Administrative Tools, and then click Active Directory Domains and Trusts. Right-click the appropriate domain name, click Properties, and then click the Trusts tab.
  2. Under Domains that trust this domain, click Add.
  3. In Trusting Domain, type NTDOMAIN, and then type a password. Note that the password must meet the minimum password requirements for the trusting domain.
  4. On the Windows NT 4.0 primary DC (PDC), start User Manager For Domains. Open Policies, and then open Trust Relationships. Under Trusting Domain, click Add.
  5. In Trusting Domain, type W2KDOMAIN, and then type the appropriate password.
  6. On the Windows 2000-based computer, under Domains trusted by this domain on the Trust tab, click Add, type NTDOMAIN and the appropriate password. You should receive an informational message that states "The trusted domain has been added and the trust has been verified."
  7. On the Windows NT 4.0 PDC, add the W2KDOMAIN domain as a trusted domain, and type the appropriate password. You should receive an informational message that states "Trust Relationship with W2KDOMAIN successfully established." The two-way trust has been established.

REFERENCES

For additional information about how to write an LMHOSTS file for domain validation, click the following article number to view the article in the Microsoft Knowledge Base:
180094 How to write an LMHOSTS file for domain validation

Properties

Article ID: 306733 - Last Review: November 1, 2006 - Revision: 3.1
APPLIES TO
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows NT Server 4.0 Standard Edition
  • Microsoft Windows NT 4.0 Service Pack 1
  • Microsoft Windows NT 4.0 Service Pack 2
  • Microsoft Windows NT 4.0 Service Pack 3
  • Microsoft Windows NT 4.0 Service Pack 4
  • Microsoft Windows NT 4.0 Service Pack 5
  • Microsoft Windows NT 4.0 Service Pack 6
  • Microsoft Windows NT 4.0 Service Pack 6a
Keywords: 
kbhowto kbhowtomaster kbnetwork KB306733

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com