One Way Trust over very slow VPN link

[Chasey]

I am having problems setting up a one-way trust between 2 domains over a very slow link that is also a VPN.

I can ping the other PDC but the time = over 3000ms. When I try to establish the trust it complains that it cannot find the PDC of the remote domain.

Has anyone had a similar experience? Any advice would be greatly appreciated.

 

[ShackDaddy]

Set up a BDC for the other domain on your side of the link. Actually, create the BDC in the remote network, then install it in your local network. Then try setting up the trust.

It could be that the trust-building scenario requires PDC-to-PDC communication, in which case that idea won't help you. Actually, I think I recall that it does. You might also think about halting all other traffic across that WAN link to give the trust-building as much bandwidth as possible. Or you might consider creating a direct dial connection between your PDC's to build the initial trust.

You might also consider whether you just have too slow a link to do proper cross-trust communication on.

I assume that you are using LMHOST files or static WINS entries on each of the PDC's?

 

[Chasey]

Thanks for the advice

I have now managed to set the trust up. I did as you recommended and set the trust up when the link was not being used at all. With the extra bandwidth it allowed me to set the trust up.