When you use the Active Directory Users and Computers snap-in and press Advanced in the
Select Users, Computers, or Groups dialog to add a trusted domain user to a trusting domain, your Windows 2000
or Windows Server 2003 domain controller reports The server is not operational.
This behavior will occur if the Guest account on the trusted domain is enabled, because the Guest account does NOT
have the rights to enumerate users.
To resolve this problem, either disable the Guest account on the trusted domain, or create the same
trusting domain user account in the trusted domain:
To disable the Guest account:
1. Use
Active Directory Users and Computers to expand the domain where you wish to make the change.
2. Select the Users folder in that domain.
3. Right-click the Guest account and press Disable Account.
To create the same trusting domain user account in the trusted domain:
1. Use
Active Directory Users and Computers to expand the domain where you wish to make the change.
2. Right-click the Users folder in that domain and press New and User.
3. Enter the same information about the user in the trusting domain.
4. Press Next.
5. Type the existing user password and press Next.
6. Press Finish.
NOTE: If you wish the user to be prompted for credentials when connecting to the
trusted domain, type a different password.