Questions tagged [trust-relationship]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
0 answers
36 views

Windows client cannot get cross-domain ticket, but a Linux one (from WSL) can

I am trying to and failing to authenticate my Kerberos credentials when doing ssh from a Windows 11 client joined to a Windows Server 2019 domain (let's call it AD.LOCAL) to a Linux host joined to a ...
user avatar
  • 7,589
0 votes
1 answer
44 views

Setting up a trust to an AD environment with DCs on premise and in Azure, how can I limit AD traffic to only the on-premise DCs?

We are setting up a trust between a stand-alone on-premise domain (DMZ from now on) and a corporate domain which is AD/AAD (synched) (CORP from now on) so that users from CORP can log into servers ...
user avatar
  • 3
0 votes
1 answer
248 views

How can I set the 'The other domain supports Kerberos AES Encryption' setting programmatically?

In the GUI (Active Directory Domains and Trusts MMC Snap-in (domain.msc)), you can set the "The other domain supports Kerberos AES Encryption" setting for a trust relationship: I am looking ...
user avatar
0 votes
1 answer
42 views

Ubuntu 21.10 with Samba AD unable to create domain trust account

I am trying to add domain trust account for additional kerberos5 (MIT) domain in Samba AD DC with command: net rpc trustdom add <domain_name> -UAdministrator%<administrator_password> What ...
user avatar
0 votes
0 answers
46 views

Application Requires Cross Domain Authentication - No trust

I've an application that going forward is going to require cross domain authentication using an AD service account across 2 separate organisations - for example domain A application needs to ...
user avatar
0 votes
1 answer
256 views

Ubuntu login fails with a user of a trusted IDM domain (AD)

We have an IDM Server on a Rocky Linux distro configured with a Trust to a Samba AD DC (also installed on a Rocky Linux). So we created a user 'usupru2' on Samba AD DC under adtest.uy domain. Then we ...
user avatar
  • 11
0 votes
0 answers
29 views

Switched BizTalk's database domain, but cannot remove DC

I've inherited an older system involving BizTalk (Server 2010) where the application and its database were on separate servers on separate domains. There has been efforts to modernize the systems and ...
user avatar
  • 1
0 votes
0 answers
93 views

Cannot RDP across one-way forest trust from child domain

We have an AD identity forest with a one-way incoming transitive forest trust from a resource forest. Name suffix routing is enabled. Users in the identity forest root domain can RDP to hosts joined ...
user avatar
0 votes
0 answers
188 views

Cannot live migrate VM from certain user on certain host

Layout Forest A Forest B Forest ForestA ForestB Domain DomainA DomainB Computers ComputerA1, ComputerA2 (none) User UserA UserB Administration ForestA trusts ForestB ForestB trusts ForestA ...
user avatar
0 votes
0 answers
152 views

"logon session does not exist" when cmdlet wrapped in do-nothing Invoke-Command

While logged into HOST1, my user can successfully run this powershell command to move a running VM from HOST1 to HOST2: Move-VM -Name DC02 -DestinationHost HOST2 -IncludeStorage -...
user avatar
0 votes
0 answers
240 views

How can I force Active Directory integrated DNS to only return SRV records for specific domain controllers based on the subnet of the client?

I have a set of several offices joined using various combinations of IPsec VPNs and an MPLS network. The majority of sites form a mesh arrangement using the VPNs, but site B only has a single IPsec ...
user avatar
1 vote
1 answer
36 views

Unable to rename the DN using trusted domain user credentials

I have two AD in which two-way trusts relationship(forest and transitive) exists. Trusted domain are trust1.com and trust2.com. I created a AD-User(TEST1) in trust2.com using administrator ...
user avatar
1 vote
0 answers
67 views

Forest trust: SPN mismatch for non-fully-qualified name

Setup All computers running Windows Server 2019. Domain A Item Value Fully Qualified Domain Name DomainA DomainA.local User UserA UserA@DomainA.local Server FileServer FileServer.DomainA.local ...
user avatar
1 vote
1 answer
2k views

Apache Guacamole Login with User from DomainA, rdp to Server from DomainB

Overview We log into Gucamole with a User from DomainA where we select a rdp-connection to a server from DomainB. Trusts DomainA to DomainB and vice versa: Type: External Kerberos AES Encryption ...
user avatar
  • 149
1 vote
1 answer
181 views

Active Directory trust fails (AWS Managed AD)

I've created AWS managed AD and try to create trust with my on-prem. After a lot of tries and solid research on the internet I keep getting this error : The remote domain ***** is not reachable. ...
user avatar
  • 11
0 votes
2 answers
104 views

2-way trust between 2 server 2016 domains active, but unable to browse each others domains

Good afternoon, I have a 2 way transative trust between 2 domains, i have also validated them in the Active directory domains and trust tool, where they both show active. From each domain controller i ...
user avatar
0 votes
0 answers
31 views

Join PCs that were on old Windows 2012 server to new server AND new domain without breaking SIDS and trust

Background: Had a small 4 PC office on Server 2012r2 with domain named OLD-DOMAIN. Server was old and wonky and had to restore from full system image backup that was recent (as in a few days old). ...
user avatar
  • 83
1 vote
1 answer
62 views

Active Directory 2016 trust issues

I am trying to set up a forest trust and use ADMT to migrate users using this set of instructions; ADMT Instructions . I am having issues getting the two-way trust to work. Domain A (testad.domain....
user avatar
1 vote
1 answer
193 views

GPO and Security Groups in multiple domain

I have 2 forests, each with one domain with a bidirectional trust. I have created security groups in forest A, to access folders, where I have added both users from forest A and B, the accesses are ...
user avatar
  • 13
1 vote
1 answer
259 views

Forest trust relationship between WAN and LAN through Pfsense

I'm using Pfsense with 3 interfaces : LAN, DMZ and WAN. The LAN contains my Domain Controller and my main forest of course (abc.com), the DMZ contains some web servers. The other forest is located ...
user avatar
1 vote
0 answers
74 views

How do you monitor an external domain trust?

We have multiple external domain trusts with different companies, and while I know how to validate the trust in "Windows Domains and Trusts", I am wondering if anyone knows how to monitor it ...
user avatar
  • 11
1 vote
0 answers
23 views

\\machinename cannot open network share while \\ipaddress work in cross domain

We have established a two-way trusted domain environment. All servers are Windows Server 2019. In server1.domainA.com there is shared drive. In server2.domainB.com, we tried to browse with \\server1 ...
user avatar
  • 217
0 votes
1 answer
147 views

Forest Trust Relationship and DNS

I am creating a new single domain Forest, SCP.com and I have an existing single domain Forest, ICS.com Have an existing internal DNS server in ICS.com that has a Forward Lookup Zone for the domain ...
user avatar
  • 1
0 votes
1 answer
704 views

How can I delete an outgoing trust on Windows Server when an internal error occurs?

Unfortunately, the Active Directory Domains and Trusts MMC Snap-in (domain.msc) lets you create an outgoing trust to a Domain Controller (in other words: specifying the name of a Domain Controller as ...
user avatar
0 votes
0 answers
107 views

Slow Application with User Accounts from other Domain - Active Directory Domain Trust Issue?

I have a strange issue and hope someone can help me finding the cause. Environment: 2 companies (let's say Company A and Company B) with seperate IT-infrastructures. Each one has its own network, own ...
user avatar
  • 49
-1 votes
1 answer
358 views

Unable to change trusted users passwords from within trusting domain

I'm experiencing a very strange issue with a one-way trust setup where users from a trusted domain (Domain A) can successfully log in to the trusting domain (Domain B), however password change ...
user avatar
1 vote
0 answers
322 views

Unable To Establish a Two Way Trust Between AWS AD DS and a Dedicated AD Server

I have a bit of a unique situation, I have a series of AWS servers that all have Active Directory installed on them (DNS and a bunch of other things too) and are Domain Controllers, I'm trying to ...
user avatar
0 votes
1 answer
157 views

Active Directory vs Active Directory Trust

We have 2 forests/domains : ad.local (not managed by us) and ad2.local (managed by us) We setup a two way trust between them. Now let's say I have an app on a server joined to ad2.local : app.ad2....
user avatar
0 votes
0 answers
78 views

AD Trusts deprecated with Server 2019?

I need to setup a AD Trust relationship between two forests. I'm unable to find a Microsoft doc for this case (all I can find is a short doc for Azure DS), is it still advised for on-premise Server ...
user avatar
  • 141
-1 votes
1 answer
51 views

Transitivity of trust when adding new domain

Suppose I have a domain trust between domain A(forest A), and domain B(forest B) (bi-directional, FOREST TRANSITIVE). Assuming I add domain C to forest A. At this point A trusts C, and B should trust ...
user avatar
0 votes
0 answers
82 views

Active Directory Domain Trust - User Audit: AD-Users from Dom-A in AD-Groups in Dom-B

For our trusted corporation workflow we had installed some AD-Domain Trusts like that: One Active Directory "Master-Domain" with all AD-Users: Dom-A.extra.com Five extra Active Directory's for ...
user avatar
0 votes
1 answer
346 views

Remote Office Having Trust Relationship Issues Due to Tombstoned Domain Controller

All Windows 10 computers in our remote location are having domain trust relationship issues. The computers are able to login after a reboot takes place, but the issue repeats after the computer goes ...
user avatar
  • 347
0 votes
1 answer
27 views

How to trust another Nameserver/Zone specificly?

For making sure a resolver is also able to resolve when not connected to the internet (which is usually not the case), I have configured a forward zone: zone "example.com" { type forward; ...
user avatar
0 votes
1 answer
2k views

user login from another domain (Transitive Trust Established)

I have setup a two way transitive forest trust between two domains (Domain A & Domain B) successfully. Now when I try to RDP as a user in domain A (admin@domainA.com) into domain B it is ...
user avatar
  • 113
-1 votes
1 answer
4k views

External Domain Trust validation fails after creation.Domain not found?

I am trying to set up a 1-way trust in my lab. LAB.local is the trusted domain while RED.local is the trusting domain. Conditional forwarding is set up on both pointing to each other. DC01.LAB.local [...
user avatar
0 votes
1 answer
361 views

Establishing security trust between two domains without VPN

We have a company we recently acquired and we would like for them to access our SQL Server Analysis Services (via Excel file) on our company's domain. They are external users with separate Windows ...
user avatar
  • 167
2 votes
1 answer
953 views

Universal Groups not working across domain trusts

I have a problem with Universal groups across a trust - membership of the universal group gives rights from one domain in a forest but not from another domain in the same forest - I've set up a test ...
user avatar
  • 133
0 votes
1 answer
486 views

Restrict AD logon between child domains

Let's say that we have 3 domains (and 3 DC's) where contoso.local is the root domain, dep1.contoso.local is a child domain of contoso.local and dep2.contoso.local is another child domain of contoso....
user avatar
0 votes
1 answer
566 views

Samba access with Redhat IdM authentication from a windows 10 workstation with AD authentication

I'm posting this here after spending the last 5 days searching google, going thru test cases as well as analyzing network traffic in the event that someone could either point me in the right direction ...
user avatar
1 vote
1 answer
2k views

How to use member of trusted domain in GPO?

I have two test domains and one trusts another. On trusting domain GPO I need to add a group from trusted domain to remote desktop users group which will apply to all computer objects in trusting ...
user avatar
  • 11
2 votes
1 answer
4k views

Active Directory Authentication Through a Trust and Querying For Users From Trusted Domain

Domain A (Forest Tree Root) (Primary Domain) Domain B (Direct Outbound) (Direct Inbound) There is a two way trust between the two Forests Domain A/B. This scenario is used to connect two companies ...
user avatar
1 vote
1 answer
339 views

DNS configuration for domain trust

I am the DNS administrator for domain1.com. We are setting up a trust with child.domain2.com. This will allow us to resolve all resources in child.domain2.com. There is also a resource in domain2....
user avatar
  • 31
1 vote
1 answer
1k views

Cross-Realm-Trust between Active Directory and MIT Kerberos

I am currently in the process of extending my development environment, which used to only run Linux servers so far, by adding machines running Windows Server 2016. The authentication process is ...
user avatar
1 vote
1 answer
3k views

LDAP simple bind to cross-forest Active Directory with 2-way trust

I have two forests (example.local and accounting.local) that have 2-way trust established. On accounting, I can bind using accounting\bind. However, it fails from example.local ldap_bind: Invalid ...
user avatar
1 vote
1 answer
3k views

Is SID Filtering Enabled?

I ran nltest /domain_trusts and received the following output: List of domain trusts: ... 1: TESTLAB TESTLAB.COM (NT 5) (Direct Outbound) ( Attr: 0x8 ) I don't understand the attribute field....
user avatar
  • 11
1 vote
1 answer
62 views

How to know the origin of a certificate on a windows PC (Especially Win 10 embedded LTSB)

I have a specific type of problem but maybe someone have a hint for me: We have some systems with special PCIe-Hardware for which we wrote and signed a driver. One certificate in the path of trust is ...
user avatar
1 vote
1 answer
491 views

Proper way to manage privileged admin groups for two trusted Active Directory forests?

The scenario is: There are two domains (DomA and DomB) with a trust relationship. The relationship is forest wide with the exception that DomA can access resources in DomB, but users in DomB should ...
user avatar
1 vote
0 answers
712 views

How to set up Linux AD Authentication to Trusted Domain

I have successfully joined a CentOS 7 server to a Windows Server 2012R2 domain: domain1.local. This domain hosts test server objects that we've created for experimentation. domain1.local is the ...
user avatar
  • 713
0 votes
0 answers
735 views

Active Directory: RPC Issues, Trust between 2003 and 2012

I've been having this ongoing issue that has been plaguing me. I am in charge of two domains: DOMAIN1 - Functional Level 2003 DOMAIN2 - Functional Level 2012 I was able to establish the trust ...
user avatar
0 votes
0 answers
1k views

LDAP query doesn't show members from a trusted domain

I have two domain A (W2K8 machine) and B (W2K12 machine) with an external non-transitive relationship with each other. I created a Security Local Domain group SLDG on A. Then I created a Security ...
user avatar