Emerson Exchange 365

• Not Answered

Trust between two domains

Hi team,

We have an architecture where Acronis management server is placed in DMZ network with Domain name 'Emerson'.

Proplus and AMS machines are placed in Delta-V network with Domain 'Alrar',

I need to make a backup of Proplus and AMS machine, Created trust between two domains and installed Acronis agent in Proplus and AMS machine and Backups were running fine for few days,

Yesterday noticed trust relationship was broken between two Domains, due to this acronis backup stopped for Proplus and AMS machines.

Deleted and recreated Trust and checked by clicking on validate button it showed connection is active and Ok. But Acronis Management service in both Proplus and AMS machines were failing to start

Later when I checked the trust internally between Two domains is not successful.

Currently Firewall rules are fully allowed to test the integrity, So this would not restrict the communication between.

Can any one suggest how to re-connect trust between two domains.

Sathishbabu.bv

• 18 Oct 2018 7:28 PM
• Cancel

1 Reply

• Tim Alexander

  

  • 4 Nov 2018 4:31 PM

  Domain Trusts breaking is going to come down to
  1) Communication Loss, which can be at the physical layer or name resolution between the domains. Start with pinging IP Addresses between the servers and work up to DNS troubleshooting
  2) Loss of Domain Integrity on either of your domains supporting the trust.
  
  Acronis does not require a Domain trust but if you used a Foreign Security Principal Account for the Agent/Managed Machine Service you just created a dependency on it. If you rebuilt the trust the User will need to be reimported as the one from the first domain trust will have a new RID(Unique Identifier) than it did the first time you built the trust.
  
  I would only recommend building Domain Trusts when they are absolutely required for functionality, and i would supplement them with additional security measures to counteract the additional attack surface they introduced, namely a 2-Factor Authentication implementation.

  • Cancel