<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html lang="en-us" xml:lang="en-us"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="security" content="public" /> <meta name="Robots" content="index,follow" /> <meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' /> <meta name="DC.Type" content="task" /> <meta name="DC.Title" content="Configure the Windows 2000 server to trust SHIPDEPT.MYCO.COM" /> <meta name="DC.Relation" scheme="URI" content="rzakhscencross.htm" /> <meta name="DC.Relation" scheme="URI" content="rzakhcrossscenario_changeencryptiononserver.htm" /> <meta name="DC.Relation" scheme="URI" content="rzakhcrossscenario_addtheshipdepttoiseriesa.htm" /> <meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" /> <meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 1998, 2006" /> <meta name="DC.Format" content="XHTML" /> <meta name="DC.Identifier" content="rzakhcrossscenario_configurethewindowsservertotrust" /> <meta name="DC.Language" content="en-us" /> <!-- All rights reserved. Licensed Materials Property of IBM --> <!-- US Government Users Restricted Rights --> <!-- Use, duplication or disclosure restricted by --> <!-- GSA ADP Schedule Contract with IBM Corp. --> <link rel="stylesheet" type="text/css" href="./ibmdita.css" /> <link rel="stylesheet" type="text/css" href="./ic.css" /> <title>Configure the Windows 2000 server to trust SHIPDEPT.MYCO.COM</title> </head> <body id="rzakhcrossscenario_configurethewindowsservertotrust"><a name="rzakhcrossscenario_configurethewindowsservertotrust"><!-- --></a> <!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script> <h1 class="topictitle1">Configure the Windows 2000 server to trust SHIPDEPT.MYCO.COM</h1> <div><div class="section">Now that you have configured iSeries™ B to trust the ORDEPT.MYCO.COM realm (sometimes referred to as a Windows<sup>®</sup> domain within the Windows interface), you need to configure the Windows 2000 server to trust the SHIPDEPT.MYCO.COM realm.</div> <ol><li><span>Log on to your Windows 2000 server with your administrator account.</span></li> <li><span>From the Start menu, expand <span class="menucascade"><span class="uicontrol">Programs</span> > <span class="uicontrol">Administrative Tools</span> > <span class="uicontrol">Active Directory Domain and Trusts</span></span>.</span></li> <li><span>On the <span class="uicontrol">Active Directory Domains and Trusts</span> page, right-click the <span class="uicontrol">ORDEPT.MYCO.COM</span> realm (sometimes referred to as a Windows domain within the Windows interface) and select <span class="uicontrol">Properties</span>.</span></li> <li><span>On the <span class="uicontrol">Trust</span> tab, click <span class="uicontrol">Add</span> on the <span class="uicontrol">Domain trusted by this domain </span> table.</span></li> <li><span>On the <span class="uicontrol">Add Trusted Domains</span> page, in the <span class="uicontrol">Trusted domain</span> field enter <tt>SHIPDEPT.MYCO.COM</tt>. Enter <tt>shipord1</tt> as the password. </span></li> <li><span>The <span class="uicontrol">Active Directory</span> dialog box is displayed indicating that the MYCO.COM domain cannot be contacted. Since the MYCO.COM domain is an interoperable non-Windows domain and you want to set up this side of the trust, click <span class="uicontrol">OK</span> to close the dialog box.</span></li> <li><span>On the <span class="uicontrol">Trust</span> tab, click <span class="uicontrol">Add</span> on the <span class="uicontrol">Domain that trust this domain </span> table.</span></li> <li><span>On the <span class="uicontrol">Add Trusted Domains</span> page, in the <span class="uicontrol">Trusted domain</span> field enter <tt>SHIPDEPT.MYCO.COM</tt>. Enter <tt>shipord2</tt> as the password.</span></li> <li><span>The <span class="uicontrol">Active Directory</span> dialog box is displayed indicating that the MYCO.COM domain cannot be contacted. Since the MYCO.COM domain is an interoperable non-Windows domain and you want to set up this side of the trust, click <span class="uicontrol">OK</span> to close the dialog box.</span></li> <li><span>Click <span class="uicontrol">OK</span>.</span></li> </ol> </div> <div> <div class="familylinks"> <div class="parentlink"><strong>Parent topic:</strong> <a href="rzakhscencross.htm" title="Use the following scenario to become familiar with the prerequisites and objectives of setting up cross realm trust on your network.">Scenario: Set up cross realm trust</a></div> <div class="previouslink"><strong>Previous topic:</strong> <a href="rzakhcrossscenario_changeencryptiononserver.htm">Change encryption values on i5/OS PASE Kerberos server</a></div> <div class="nextlink"><strong>Next topic:</strong> <a href="rzakhcrossscenario_addtheshipdepttoiseriesa.htm">Add the SHIPDEPT.MYCO.COM realm to iSeries A</a></div> </div> </div> </body> </html>