Resolution
NetIQ Group Policy Administrator 5.0
symptom
Unable to add forest to the GPExplorer node. 'The forest or domain is not trusted'.
symptom
GPA is unable to resolve the transitive trust relationships of the domains with which the GPA Console's domain has a trust relationship.
symptom
GPA incorrectly indicates there is no trust between domains when you are adding a domain to GP Explorer that has a forest-level trust with a parent domain of the domain where the GPA Console is installed but no direct trust relationship with the domain where the GPA Console is installed.
cause
GPA is not recognizing the transitive trusts between child domains under a single parent domain.
cause
This is a known issue with NetIQ Group Policy Administrator 5.0.
fix
This issue is addressed in NetIQ Group Policy Administrator version 5.0 Hotfix 54403
Hotfix 54403 addresses an issue where GPA incorrectly indicates there is no trust between domains when you are adding a domain to GP Explorer that has a forest-level trust with a parent domain of the domain where the GPA Console is installed but no direct trust relationship with the domain where the GPA Console is installed. GPA is unable to resolve the transitive trust relationships of the domains with which the GPA Console's domain has a trust relationship. This hotfix addresses this issue and enables GPA to resolve the transitive trust relationships of the domains with which the GPA Console's domain has a trust relationship.
To install this hotfix, perform the following steps on each GPA Console computer:
- Close all GPA user interfaces.
- Run the GPA50000_Hotfix54403.exe file.
This hotfix modifies the following file:
- faGPExpl.dll
By default, GPA installs this file in the Program Files\NetIQ\Group Policy Administrator\Bin folder.
For more information, please contact NetIQ Technical Support at https://www.netiq.com/support .