<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2525 " id="quads-ad2525" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<h1 class="wp-block-heading" id="h.p_ID_32">Domain Controller Cross Forest migration Part 2</h1>



<p><em> <a href="https://plus.google.com/111669386109520391003" target="_blank" rel="noreferrer noopener">Mohammed Hamada</a> <a href="http://www.google.com/url?q=http%3A%2F%2Fwww.moh10ly.website%2F2015%2F05%2Fdomain-controller-cross-forest_5.html&;sa=D&;sntz=1&;usg=AFQjCNGwA0bLIgH9brfqJWTp2-yiavtz7g" target="_blank" rel="noreferrer noopener">4:35 AM</a> <a href="http://www.google.com/url?q=http%3A%2F%2Fwww.moh10ly.website%2Fsearch%2Flabel%2FActive%2520Directory&;sa=D&;sntz=1&;usg=AFQjCNFK0IEj4_RImx0OsJnLi99tbdWeHQ" target="_blank" rel="noreferrer noopener">Active Directory</a> , <a href="http://www.google.com/url?q=http%3A%2F%2Fwww.moh10ly.website%2Fsearch%2Flabel%2FWindows%2520Migration&;sa=D&;sntz=1&;usg=AFQjCNGXdGmQ0DHjokvWHkOck5hJxSHqEQ" target="_blank" rel="noreferrer noopener">Windows Migration</a> , <a href="http://www.google.com/url?q=http%3A%2F%2Fwww.moh10ly.website%2Fsearch%2Flabel%2FWindows%2520Server&;sa=D&;sntz=1&;usg=AFQjCNFQZTYDisbM2gUhC1dOR2TyKtFIOA" target="_blank" rel="noreferrer noopener">Windows Server</a></em></p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2527 " id="quads-ad2527" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2523 " id="quads-ad2523" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2530 " id="quads-ad2530" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>




<p>Current environment on the LAB.com DC</p>



<ol class="wp-block-list"><li>Additional DC2</li><li>SCVMM</li><li>SCVMM SQL</li><li>Exchange</li><li>SCMM</li><li>SCMM SQL</li></ol>



<p><strong>Computers</strong></p>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-jUR4i3662kY/VUips4Fp8_I/AAAAAAAAOdE/nWFdsqp9gio/s1600-h/clip_image001%25255B7%25255D%25255B4%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh5.googleusercontent.com/4x1Bf2zi0d_JiVs3_q7_EQmv2HTVfnF9Rd1YQfSL0m127iejt1dM9i-lxaJf70aXvX1Zx20CryXIxLwbr4HySGGN_yzXq2flpIYvlDUo94UfKC-rjA=w673" alt="clip_image001[7]"/></a> 

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2526 " id="quads-ad2526" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>
 
</figure>



<p><strong>Migration plan</strong></p>



<p>AD 2012 R2 (LAB.com) to (Contoso.com) 2012 R2.</p>



<p>Users</p>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-cGUjb6Glxuc/VUipvBS7M3I/AAAAAAAAOdU/-ztAr98K_Jg/s1600-h/clip_image002%25255B6%25255D%25255B4%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh5.googleusercontent.com/zETNyr91agPPNfDp9LKWTe3B6TsWtsbcMOqvwamxuNreM16ZzqFU8rGseKpY1uwN6vfp5IugMy_7b_tSmIxesW_8tuoVxOWTbeYxJXsIFkVRPBifBQ=w572" alt="clip_image002[6]"/></a></figure>



<p>In the second part of this series (DC cross forest migration) I will demonstrate some major required steps for the migration from the old DC (lab.com) to the new DC (Contoso.com)</p>



<p><strong>NOTE:</strong></p>



<p>SQL Servers and their applications can’t be migrated due to SQL permissions and Schema mismatch.</p>



<p><strong>Requirements are :</strong></p>



<p>Destination DC Forest Function and domain function level must be set to at least 2008 R2 for ADMT3.2 to work</p>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-HinCnqzNgD4/VUip2d_65vI/AAAAAAAAOdk/naMQT-39LJQ/s1600-h/clip_image002%25255B4%25255D%25255B4%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh6.googleusercontent.com/kzdXwC4ypw2vUOz9uZAMUJby_4D1wqstjBE-OfMjCBWXsH-gRT6lD-QzXa2NfcHSEr90n3jUEDxmutdViePCWDn3M4KtTAJ-8JPR1N4Mjk-X0cgwjDe4=w673" alt="clip_image002[4]"/></a></figure>



<p>And a health check must be performed on the FSMO roles to make sure everything is functioning properly on the Source DC.. PDC, SchemaMaster..etc</p>



<p>The checks I will perform are</p>



<ol class="wp-block-list"><li>Check replication (In case there’s more than one DC In the source forest).</li><li>DC health (DCDiag tool)</li><li>Check the reachability of the PDC.</li></ol>



<p>Netdom query FSMO ( this command will show you which DC in the source forest holds the roles exactly)</p>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-D62bTSy6s3g/VUip4OocCOI/AAAAAAAAOd0/5joXBw72HSc/s1600-h/clip_image001%25255B5%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh5.googleusercontent.com/7mrAYx9TtEX1VPoqoYFbFgnsLWy9-YzI2-W9hovRxIKGUImQQjohh0n4yOaPEMgmFpjTQxxaZgVLR5l9Xi38kN46WMSz9MmxoI1dCAaecH5x5ovfAA=w371" alt="clip_image001[5]"/></a></figure>



<p>1- For Checking replication you can use the repadmin command line which checks replication between sites, DCS and reports any errors in between. in case you have one server in pace the following outcome should be printed for you.</p>



<p>Repadmin.exe helps administrators diagnose Active Directory replication problems between domain controllers running Microsoft Windows operating systems.</p>



<figure class="wp-block-embed"><div class="wp-block-embed__wrapper">
https://technet.microsoft.com/en-us/library/cc770963.aspx
</div></figure>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-KnfZeRqmpZY/VUip55DhikI/AAAAAAAAOeE/JcRmpcvCm_8/s1600-h/image%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh5.googleusercontent.com/NiCT5wZDlHjHg5Aq-KP8x8vKCzUZAvIAqnY58K11KQ8tSRs7DrtCd-hdrvn4y-X1vbjuUifqeggphbOtJGcGI6xXKetcpaE21bMLEuM1bPe2sP9yDhxd=w572" alt="image"/></a></figure>



<p>2- Check DC health using DCDIAG tool</p>



<p>Analyzes the state of domain controllers in a forest or enterprise and reports any problems to help in troubleshooting</p>



<p><a href="https://technet.microsoft.com/en-us/library/cc731968.aspx">https://technet.microsoft.com/en-us/library/cc731968.aspx</a></p>



<p>as they are multiple types of tests that can be applied with dcdiag depending on the parameter used. I will start with the DNS.</p>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-71-VgabHEZM/VUip7gF2muI/AAAAAAAAOeU/OKy7CP-I89k/s1600-h/image%25255B8%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh4.googleusercontent.com/Wm3fJZGTnmkoM64OZ7ooUST50jX10xmUi6B-KHrXntnqJUmYv_3sA7FQrXvSVZ51Ozvjrru5KdHru9iBJUpCI2WELDkNmrbZH65DOqnyjs2CotuKboo=w673" alt="image"/></a></figure>



<p>If the DNS is healthy then it should show as following. and we can continue to the next test.</p>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-6yfsP13JtBo/VUiqBWHUf2I/AAAAAAAAOek/Py7eO3JC3So/s1600-h/image%25255B11%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh3.googleusercontent.com/j2fSXslkGKWEdjFddgcrTEO0P1WOeMk5Jv8OrIIah8Dy5zngYNQLX5FF_jsIsVhsTb7KDy6u3E7VjfZlx0EBbi18zXqkxNI0DbJOhuFrHuY6O3_mDA=w673" alt="image"/></a></figure>



<p>For an extensive test, you can use the parameter /v along with this sign >;c:\dcdiag.txt to export the test to a file and look at it line by line.</p>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-xca1fLZM9wU/VUiqDjdXs_I/AAAAAAAAOe0/8v_qiuI0vWI/s1600-h/image%25255B14%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh6.googleusercontent.com/6VsOTvfuevFPd4A7kHsoeEr4wD3r0asr0Wkt-fIc6E32kAHf_n4uuQKGMud5Kt_Go5qX1oe537BlGmpVbUsYrtlbR60DDpHqCnBi-tjCbiM3kqd0hYI=w472" alt="image"/></a></figure>



<p>If everything sounds good and healthy we shall move on to the next step which is DNS configuration</p>



<p><strong>DNS Configuration</strong></p>



<p><strong>Preparation:</strong></p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2522 " id="quads-ad2522" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>




<ol class="wp-block-list"><li>DNS replication between both domains</li><li>Installing Windows 2008 R2 for ADMT 3.2</li><li>Setting up domain trust between forests.</li><li><strong>DNS replication between the source and target domain</strong></li></ol>



<p>In order for the trust to be created between both forests, you either have to create a conditional forwarders that will copy the source zones to the destination DNS server and vice versa or you can create a secondary forwarder zone in destination DC for the source DC and vice versa.</p>



<p>In my case I will go for creating a secondary zone and to do this I will go to each DNS server and allow Zone to be transferred.</p>



<p><strong>Note:</strong></p>



<p>You can include only the IPs of the Source and Destination servers in the zone transfer and any additional DNS servers.</p>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-WLSZ5LO3CmE/VUiqFZF3Z6I/AAAAAAAAOfE/vgM7nU2XxE0/s1600-h/clip_image003%25255B7%25255D%25255B3%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh5.googleusercontent.com/0x4ZVWIZq48WWWRt7PDWRLz86dUd3PJ_I43TDxmPq3qxOY8cki6qE3ZWcmGg7f9IlE3iWboKIE-PEM2UgEPJ0aoVMskhOsON5Xma81uohM33QPgAX0U=w773" alt="clip_image003[7]"/></a></figure>



<p>Now I a have created a secondary zone DNS and trying to resolve FQDNs from the source server as in the below snapshot.</p>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-5LyS38qnXIE/VUiqIxvoFyI/AAAAAAAAOfU/O5dDz0-ZkSQ/s1600-h/clip_image004%25255B7%25255D%25255B3%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh4.googleusercontent.com/7X2fuAngJpTAJjWq4JwYI78FdeffNzGrmboWx2cQTyzF3cHx5PMLEd72jMk0z8_9ZsqGKteu8gy3P866UPZjQJGDJrPUg9ahrO6sN6ulcOSFkwU2LZcK=w773" alt="clip_image004[7]"/></a></figure>



<p>Same will be done on the destination server.</p>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-ydzGudpCVJM/VUiqMGO5nhI/AAAAAAAAOfk/vZ5V5XGnAsg/s1600-h/clip_image005%25255B7%25255D%25255B3%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh6.googleusercontent.com/km0_slpBCRv8BR92Hou5mKGwPA2MpIftU8tInWCziCz-T2-VrEEA7thVebxR39VGn3VLbNVZHy5tuzYlKR-YGAGIs_Tv0qNWXoJ_zjodFSvmH8Y7s8M=w773" alt="clip_image005[7]"/></a></figure>



<p>Checking Name Resolution for both domains:</p>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-lktGGTPu_GM/VUiqP_l4NhI/AAAAAAAAOf0/QKvgeuHONrg/s1600-h/clip_image006%25255B7%25255D%25255B3%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh3.googleusercontent.com/jlztEHH7a9vP4p1wUb6gtd5ItCdyOgh8rQxc_qaa6NA_A9UQ_M91ciNvVOR-mr5M4fOOmNbytYEYqMtLKtYqVYFvaVN52BVv8qr4XOLjpS_fYOy74cI=w773" alt="clip_image006[7]"/></a></figure>



<p>Once the nslookup works as expected from both servers then we’ll ahead with creating forest trust between both DCs.</p>



<p><strong>Creating Forest trust between Source and Destination Domain.</strong></p>



<p><strong>NOTE:</strong></p>



<p>In order for the trust to be created between both source and destination domains the PDC on the Destination Domain must be available.</p>



<p>1. Open the Active Directory Domains and Trusts, right click on the domain and click properties.</p>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-q5FwrV3qHSA/VUiqSWxcu4I/AAAAAAAAOgE/wU1ovPIjIGI/s1600-h/clip_image011%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh3.googleusercontent.com/9B73je2xplC8zkSPp4MDjvKsuYHbDt2fFKLkQvGyimgYX8kNNfvG49qKaIPbdXNxRjOCxDjo17cBaEG-r36X8e1r-LEG1iRO1xHU36JkIikiH-rZULQ=w673" alt="clip_image011[4]"/></a></figure>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-YiVGSQNFWnA/VUiqUbAc7vI/AAAAAAAAOgU/ni-2t6ik-Ns/s1600-h/clip_image012%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh6.googleusercontent.com/O5YZhKjERIZYhk6bfi2jucS2T_AKeTFvmqxRfwM9MU_Jks8NkFaSDFORU3ExbWxhUrHJivL7FAroAO5vy-O4O_o5NgCtFQcNtJRAYFZxq3OGculEhiI=w673" alt="clip_image012[4]"/></a></figure>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-MTgEmtsoyUE/VUiqWKTnDuI/AAAAAAAAOgk/hlrItpMmUO4/s1600-h/clip_image013%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh5.googleusercontent.com/PcSNrNv_-EE_izkZ5xClcWTevpPWNtjTAW4MuYYUdURZOh9OonQWPA1iYAsjToJTtGkNWAxl7kDnD2GUpFK-qVk2_Y2yS_yHFYPgcq0_YS5JkBEYQZc=w572" alt="clip_image013[4]"/></a></figure>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-qjLdS6BdrZw/VUiqYBOmDuI/AAAAAAAAOg0/vqgaGgX4kKQ/s1600-h/clip_image014%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh4.googleusercontent.com/skyqFw2mfIWPMrBxcVk3vCYm2srvE9UL6q-MqrMoTo2oOn1Pl8hTqpSvyWNLvj38c8QlbsfCqMuIU1rPsPteQ4J0coewteOyMfYnqBL2Dywlo2oMjeiK=w572" alt="clip_image014[4]"/></a></figure>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-9nTIQUlUnTo/VUiqaNd2III/AAAAAAAAOhE/a6Fb-jk4DIc/s1600-h/clip_image015%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh6.googleusercontent.com/kH451A3DmW6q6DrXSU3bmjUPTrjTcTmn2uE6Q6bYJnnxITyWxQQ01n9EtIuCBDghVD6cOwUk87GSzknJ9BmjlJlocNFcl6WcC7pV2QFeyom9Ij9jyg=w572" alt="clip_image015[4]"/></a></figure>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-4zVMH637p-U/VUiqcsF-rzI/AAAAAAAAOhU/_mvUWDS0KZA/s1600-h/clip_image016%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh4.googleusercontent.com/IZtbKPlzDu_2LkBkWSYdgg-ljs4Q4slAlfOzYfnrZcpMR3eJxZzP_qPJLjaXJUC2BkgMjSy_Zn2-lI3KWEeZz8alfTsFxYH4gcboOpy_s7bRhdcI6V1V=w572" alt="clip_image016[4]"/></a></figure>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-lBlogjr-VvE/VUiqe7bKJSI/AAAAAAAAOhk/mj4fUg9Ks7E/s1600-h/clip_image017%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh6.googleusercontent.com/ijTt8ic--GBV4e6TztIA5bjgSK_r5HqlIfsePqglsRjjylfzcvs_xjnlJ1ZPSY6QSGOnbeJAH1a2-Wl70d9rtL8YSKRdYSw47oSNnaOkSDi_LwzHyw=w572" alt="clip_image017[4]"/></a></figure>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-2NY2kxh0nP0/VUiqhCNw8SI/AAAAAAAAOh0/TFIgkvM681A/s1600-h/clip_image018%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh5.googleusercontent.com/dNiljNVWET1N8pLDwnlT245t9HmpSuM1VhA2UlAphQlYnQ3-W0ehyl1mUdoQTMIolokavT2BPBigIpWCpLN1HP7nlXGOFR0NWtIjITqz3ndxpkzPx8bO=w572" alt="clip_image018[4]"/></a></figure>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-N2GKNk5qqEU/VUiqjo3D9BI/AAAAAAAAOiE/kIlNVqRGzvM/s1600-h/clip_image019%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh4.googleusercontent.com/nVuldIxWv-bVjRzl8Tt9ljCJuSEVCuA_1j3YCVRnkllF6iF5z-qS0S9hYEScC2c7yTnpzKxEnM0-K30JBkDqn-Sj8nFE2Sn7Kx4gFRGJO8N_qd-08sY=w472" alt="clip_image019[4]"/></a></figure>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-nIdBCp_55fs/VUiqlaOYvTI/AAAAAAAAOiU/1pNVsK9Ethg/s1600-h/clip_image020%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh4.googleusercontent.com/acP73UqU3Nig_y1NDQEvwEMR84UVZw38b34VzmgIstL3_FZVaCHOevbv7k4MWMK7WeL8i_BwHVjB_7V2Be4pZlSlHs5qbGo6rXORmp4jPfzZ1khAog=w572" alt="clip_image020[4]"/></a></figure>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-vXT8BwpFFhk/VUiqnoFc2DI/AAAAAAAAOik/QzhdrOEazqA/s1600-h/clip_image021%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh4.googleusercontent.com/OA3Su8v3-m24bzbTqpVhzZR9YX6RDJU2CJ2F3ZYI7voqQxZxQhPmU0J-zIxKrXfqfNKU0Z2UgtrEyB_Viil7ZVQIjcBMCErpY_anZuow23f3yOxGKA0=w572" alt="clip_image021[4]"/></a></figure>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-YLr-tPjl7lU/VUiqpjEa0fI/AAAAAAAAOi0/QOAhzdbkWEA/s1600-h/clip_image022%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh3.googleusercontent.com/g4qCBdI4JAnM3rbo9rrYcJ-s3c1ac0nl7cQXylhb2gJUZ6yMmjVcfHZe7mHp7VYBkgCl86Su18i33pLutvzTy7JQPtpx9-aGUpRn1jGs-or8aS1GIg=w572" alt="clip_image022[4]"/></a></figure>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-xrzjpZACKDU/VUiqrcVNQqI/AAAAAAAAOjE/qRGfnmYT_Nw/s1600-h/clip_image023%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh3.googleusercontent.com/5bUFqDPLpd0K5Vkx6v8gjyVUA4JretSeOyVJlWJZbeCG_BMH0yFoDOkI3ao2SF4nDxRzlcwQIRbYWJPC84yznobn4YjQ4LzSPnBhT7COwDMcuZ3yj3g=w572" alt="clip_image023[4]"/></a></figure>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-oF1vvNOAuGs/VUiqtdETDuI/AAAAAAAAOjU/YwKezARopbY/s1600-h/clip_image024%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh5.googleusercontent.com/UKExYj88vsm6cbh00iIY2Wpd-qgyUw2BjMFhT5aWwGvlGiQxow1Ag0fugfbkxzj6tTGc1Xp8uQB4lATvwstQcgtvcUtD6rqYJtQk2aLh-QaxD5QpM6U=w572" alt="clip_image024[4]"/></a></figure>



<p>We will have to validate trust after creating it to make sure that trust in both ways are validated.</p>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-OQYL-maYY9Y/VUiqvSsxzeI/AAAAAAAAOjk/kSNvvypQG00/s1600-h/clip_image025%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh6.googleusercontent.com/GMz7wU_-iskYz_n07fMEAyBOjIh3uT8b-oVyMVD1F6RaIa6IbUhnlThLwBBk6jwgU3RENNth8od-jKnaJqUk5_jXm6EPbSBfz9_N1I6UyAgAWjeaQQ=w472" alt="clip_image025[4]"/></a></figure>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-JLF040Ut4kg/VUiqxY4stkI/AAAAAAAAOj0/3i3eqWKEmAY/s1600-h/clip_image026%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh5.googleusercontent.com/WQpMBViQwYgUtuhWtbu3-JTzCCuclMkv_ndr-fTwyPHa-QBTcVLHphaN5PTYdokNmGRlcpWnZGVtKUK-BusJ1LmZTT7keZfLNsfOQadsoWJjrsaJBdA=w572" alt="clip_image026[4]"/></a></figure>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-pdl5wGq-HOs/VUiqzZc5HvI/AAAAAAAAOkE/IDfZOIB1L78/s1600-h/clip_image027%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh6.googleusercontent.com/k57yRpZKJ8aF3KyaSMQMMOMDqdPJUumWEnD4m0vOiqZrz9ld5lECuHPebmeKHEHklf2VY2EgvjomftPJWcPVaAI2SfL4PkAbZMEA-5cXJ6CbRN5c3ko=w673" alt="clip_image027[4]"/></a></figure>



<p>Now since trust is created and already validated both ways, we’ll have to add a GPO policy to update all clients with the new Domain name in the DNS suffix search list to resolve netbios names.</p>



<p><strong>Updating DNS Suffix Search list:</strong></p>



<p>DNS suffix search list:</p>



<p>In order to add the source and destination domains suffix to the dns suffix search list we will have to open GPO on the destination Domain (Contoso.com)</p>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-lgx1-C1hcos/VUiq1aVu0nI/AAAAAAAAOkU/-SfJOZ662Iw/s1600-h/clip_image028%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh3.googleusercontent.com/lW5UDG6WiY_slKUm7fuKqLJl0eNTC6Yd7Dv9tl9jflYPSdywxRu4i0zw8L54MEvEw9qfbAl2KJyM3HzMv7AdASD2-u-uIngg5JrLGCFMi0V2i0JrCN1d=w572" alt="clip_image028[4]"/></a></figure>



<p>On the target domain (contoso.com) we&#8217;ll have to open GPO .</p>



<p>Right Click on default domain policy / Edit</p>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-IAiLTjEdG64/VUiq3TvDkcI/AAAAAAAAOkk/v4Jngn3Mkgs/s1600-h/clip_image029%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh4.googleusercontent.com/u_5ynR6JqFS5upfcuA7eJZ8AGPveILEYynQNIvUvt1yo3WDd5ivxv8xbT0xg8N7YqC22MVrQ2PUdUF_dfhSRhZ6d81D_Pj556hnfU0aa3Robpx3ntpgn=w673" alt="clip_image029[4]"/></a></figure>



<p>Go to (Computer Configuration \ Policies \ Administrative Templates \ Network \ DNS client</p>



<p>Double click on the DNS Suffix Search list to open it and enable it.</p>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-E5d1WbJNx8o/VUiq6IwZO7I/AAAAAAAAOk0/44kw3wZMces/s1600-h/clip_image031%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh6.googleusercontent.com/2nZBc4nH_vfrPdV4TivBt_rTB7elO-SHj9RKlu71kQSD4Lxo5ukucpyXbRVdeOcXwOpTUihDXYw4dsVohYEKyaH2sag_zFWh8Ebz9vkNB9tZgLLjwNZg=w673" alt="clip_image031[4]"/></a></figure>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-EL5PjIVm2D0/VUiq8zM7HVI/AAAAAAAAOlA/3TjEVplWFK8/s1600-h/image%25255B20%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh5.googleusercontent.com/XnpRYSrpws0VSETLef1gSpZ8VQoi67lvEhlUQvax02v65VxoCTpuEuXWU2t4wJalhFWpOG1u5hggh5KS0zD4kzBEm2hh7yI86gMDXPvSbFZwJ6ckFKQ=w673" alt="image"/></a></figure>



<p>Click ok and apply the police and see how it should show in the report.</p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2524 " id="quads-ad2524" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>




<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-DPqbaN1ZHfY/VUiq_PbguRI/AAAAAAAAOlU/lbn13GmAcqE/s1600-h/clip_image033%25255B4%25255D%25255B2%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh5.googleusercontent.com/lqiikWuy1TAZ7FkWIQqmoY2IG7FGSHred1p7UDqRJiZM3l28tGeu22skZ8D6zQ3vxecqKrriSxUQHmtdEC5Sb4XoatRvmQEunTe3B-cnrxm3_OsnEA=w673" alt="clip_image033[4]"/></a></figure>



<p>Once this is done and policy is applied among all clients you should have no problem and it should show first on the DC where you applied the policy.</p>



<figure class="wp-block-image"><a href="http://lh3.googleusercontent.com/-R-wnYajw97Y/VUirAwfmyoI/AAAAAAAAOlk/NDHMcCycwB4/s1600-h/image%25255B23%25255D.png" target="_blank" rel="noreferrer noopener"><img src="https://lh5.googleusercontent.com/GtD_R6Z64wf6Y29bwvkUSYiD1E3qn1n8HQpSVltqQV-qDMAr69M5vETMmhR7ytkb0_rL2DRETAl4zCytIW79W2erLfjJY7abeO27aiGKKT5vWH8jvw4=w572" alt="image"/></a></figure>
</p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2531 " id="quads-ad2531" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>


Reset and manage your Active Directory users' Passwords Active Directory is one of the most…
Finding Exchange Database hidden mailboxes. Story:Maybe you have been in this situation before, trying to…
If you're using a Proxy server in your firewall or in your network and have…
Story:I got some clients that have reported some of their users being locked out and…
Delegate Permissions This is a code that I have wrote recently to check if an…
Story: I got a request from a client who constantly gets CVs and have to…