Thank you very much for kind words.

Again thank you.

Yes, I had forgotten to create a reverse lookup zone on Tree domain. It shouldn't be the permission error, it might be due to replication is not completed. You can change the preferred DNS server address as required. The Local DNS servers address should be preferred address for DNS.

You can create default Application partitions using DNS manager. For name resolution purpose, temporary use the hostfile (in case required). Create default application partitions, make sure Forest DNS zone is replicating and then you can remote the changes from the hostfile.

I got same error

yes beucause on you root domain you have 2 DC you must open both of them to do the procedure

I have one more VM with two network interfaces. I have configured LAN routing on it so it can act a router.

@@MSFTWebCast Thank you. Any good reference to learn more on networking?

If tree domain is not coming back then and then only follow this process. 1. Check who holds the FSMO roles. If any fsmo role is assigned to tree DC, then transfer the role and assign to an active domain controller. 2. You can use Active Directory Domains and Trusts GUI option or Metadata cleanup CUI option to remove the tree domains domain controller.

Generally we use tree domain in forest if we want to have separate domain with different domain dns name. And also Root Domain administrator have access on it.

@@MSFTWebCast thanks for your reply

On which domain controller?

@@MSFTWebCast I guess I made a mistake. Now it fixed. Thank you for your quick reply.

I think its related to DNS. Have you configured root domains DNS servers address as a preferred DNS server address on the server which you want to setup as a child domain?

Thank you for your reply. Yes, I set up the root domain DNS as a preferred DNS server address. I can nslookup the domain name. It points to my root domain private ip address (this is what I want). But if I ping, it redirect to public ip address of my root domain (no response, timeout). And I still stuck in installation steps (configuring the local computer to host Active Directory Domain Services). Is there anywhere I can see the log for the installation process. @@MSFTWebCast

@@xinyuechen2494 This is strange! Why public IP address of root domain? For time being add static entry of your domain names DNS name and private IP address in hostfile. for exmaple: x.x.x.x yourdomainname.com And check ping again.

It works! Thank you so much!@@MSFTWebCast

Might be permissions issue. On tree domain, if you have sign in with tree domain administrator account. you can not force root domain for replication. You can only ask for replication data from root domain. On root domain, you can perform both side replication (to tree domain and from tree domain).

Yes, I understood, and big thk for your advise.

CDC use the parent domain dns name and in case of tree domain you get new domain dns name.

You will find the group in your root domain. You can add one of your admin (of other domain) into enterprise admin group if needed.

@@MSFTWebCast thanks for your help

Tree root trust will create automatically, there is no manually steps required. Can you be more specific about your setup?

@@MSFTWebCast I have two DC on root domain. 1 on child domain. 1 on tree domain . On child and tree domain I have two networks cards and I enable rooting . On tree domain I can't resolve the name. . On replication topology as here I don't have the Delhi DC on Bangalore DC

@@theodorosroufis870 I am confused. You mean you have three domains. One Parent Root Domain, one child domain and one tree domain. There will be no direct trust relationship between one child domain and another tree domain within same AD forest. If you are unable to resolve domain dns name then add or create dns conditional forwarding for that domain in DNS. That will fix dns name related issue. Make sure all domains can communicate with other domain using DNS name. If they are not able to do so then use DNS conditional forwarded or dns stub zone to fix it.

@@MSFTWebCast thank you I fixed up

When I am trying to create a reverse look up zone. When I try to finish it. Dns failure

Check DNS servers IP address settings. Try to ping the IP address of DNS Server.