Do you trust Craigslist ad?

AD Forest Trust windows 2009?

• Hi there -We have a co-location facility where a one way AD trust is needed. It was working before when we had a PTP VPN Tunnel T1 setup. A week ago we decided T1 no longer suffice our needs so we upgraded in to an MPLS circuit. After installing and activating MPLS, our AD trust broke. All of us in the department are scratching our heads thinking on what might be wrong. We made sure all possible ports/ACLs are in our routers allowing this traffic but no luck. We've noticed while AD trust is being validated, per our colocation engineers it is responding to one of our remote sites domain controllers instead of our primary DC in corporate which instabilities in trust might occur in the future on to whom queries needs to respond to which DC. Our setup are as follows: Windows 2008 64bit, one domain (no child/sub-domains), 300 user base, T1 point to point between corporate/small sites (5 branch sites approx. 10-15 miles apart), MPLS connections are in 2 large/mid size connected directly to our colocation (10 miles apart), MPLS connect directly into our colocation, 1 Local DCs in each remote sites are in place, 2 DCs in corporate site, all DCs are same weight/priority, FSMO roles are in corporate site. I need expert advise if anybody can assist: 1. When re-validating trust, why is the colocation querying our remote site instead of our corporate site? 2. How do I fix the above scenario? 3. How do I make sure that our colocation only sees our corporate DCs for them to establish trust then hide the rest of my DCs in remote sites? Cheers - DB

• Answer:

  I use Comodo VPN which is fantastic and good to know about yours.