Windows 2003 and Windows 2008 forest trust
Исходные данные:
Два леса по одному корневому домену в каждом. С одной стороны контроллер домена Windows 2003 SP2, с другой Windows 2008 R2.
При создании доверительных отношений forest trust между лесами, отображается ошибка:
The verification of the incoming trust failed with the following error(s):
The trust password verification failed with error 1787: The security database on the server does not have a computer account for this workstation trust relationship.
A secure channel reset will be attempted.
The secure channel reset failed with error 1787: The security database on the server does not have a computer account for this workstation trust relationship.
The outgoing trust has been verified. It is in place and active.
В журнале отображается ошибка:
The Security System detected an authentication error for the server cifs/PDC-DC-01.SDC.test. The failure code from authentication protocol Kerberos was «The name or SID of the domain specified is inconsistent with the trust information for that domain.
(0xc000019b)».
Решение: Установить обновление на контроллер Windows 2003 SP2 http://support.microsoft.com/kb/931192/en-us и перезагрузить компьютер.