[STAGE4 - Create Trust] Cannot create forest trust

[dovidio]

Description

I had trouble establishing a forest trust between the "on-premise" AD and the managed AD.
After some investigation I noticed that the security group created for the directory controller was allowing dns and kerberos traffic only for 10.16.0.0/16 range.
After allowing UPD and TCP traffic for 0.0.0.0/0 the trust relationship process worked

[pakwai122]

Thank you for letting me know. It looks like Cantrill won't fix his material. @acantril

[malake]

Thanks for the help, @dovidio. While not great (0.0.0.0/0) it's the best path forward given I've already exceeded my monthly budget trying to troubleshoot. For all those who come after, update your SG assigned to your domain controller ID to open.