Questions tagged [trust-relationship]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
-1
votes
1answer
55 views

Unable to change trusted users passwords from within trusting domain

I'm experiencing a very strange issue with a one-way trust setup where users from a trusted domain (Domain A) can successfully log in to the trusting domain (Domain B), however password change ...
1
vote
0answers
28 views

Unable To Establish a Two Way Trust Between AWS AD DS and a Dedicated AD Server

I have a bit of a unique situation, I have a series of AWS servers that all have Active Directory installed on them (DNS and a bunch of other things too) and are Domain Controllers, I'm trying to ...
0
votes
1answer
64 views

Active Directory vs Active Directory Trust

We have 2 forests/domains : ad.local (not managed by us) and ad2.local (managed by us) We setup a two way trust between them. Now let's say I have an app on a server joined to ad2.local : app.ad2....
0
votes
0answers
26 views

AD Trusts deprecated with Server 2019?

I need to setup a AD Trust relationship between two forests. I'm unable to find a Microsoft doc for this case (all I can find is a short doc for Azure DS), is it still advised for on-premise Server ...
-1
votes
1answer
45 views

Transitivity of trust when adding new domain

Suppose I have a domain trust between domain A(forest A), and domain B(forest B) (bi-directional, FOREST TRANSITIVE). Assuming I add domain C to forest A. At this point A trusts C, and B should trust ...
0
votes
0answers
46 views

Active Directory Domain Trust - User Audit: AD-Users from Dom-A in AD-Groups in Dom-B

For our trusted corporation workflow we had installed some AD-Domain Trusts like that: One Active Directory "Master-Domain" with all AD-Users: Dom-A.extra.com Five extra Active Directory's for ...
0
votes
1answer
105 views

Remote Office Having Trust Relationship Issues Due to Tombstoned Domain Controller

All Windows 10 computers in our remote location are having domain trust relationship issues. The computers are able to login after a reboot takes place, but the issue repeats after the computer goes ...
0
votes
1answer
24 views

How to trust another Nameserver/Zone specificly?

For making sure a resolver is also able to resolve when not connected to the internet (which is usually not the case), I have configured a forward zone: zone "example.com" { type forward; ...
0
votes
1answer
218 views

user login from another domain (Transitive Trust Established)

I have setup a two way transitive forest trust between two domains (Domain A & Domain B) successfully. Now when I try to RDP as a user in domain A (admin@domainA.com) into domain B it is ...
0
votes
1answer
1k views

External Domain Trust validation fails after creation.Domain not found?

I am trying to set up a 1-way trust in my lab. LAB.local is the trusted domain while RED.local is the trusting domain. Conditional forwarding is set up on both pointing to each other. DC01.LAB.local [...
0
votes
1answer
208 views

Establishing security trust between two domains without VPN

We have a company we recently acquired and we would like for them to access our SQL Server Analysis Services (via Excel file) on our company's domain. They are external users with separate Windows ...
2
votes
1answer
277 views

Universal Groups not working across domain trusts

I have a problem with Universal groups across a trust - membership of the universal group gives rights from one domain in a forest but not from another domain in the same forest - I've set up a test ...
0
votes
1answer
92 views

Restrict AD logon between child domains

Let's say that we have 3 domains (and 3 DC's) where contoso.local is the root domain, dep1.contoso.local is a child domain of contoso.local and dep2.contoso.local is another child domain of contoso....
0
votes
1answer
320 views

Samba access with Redhat IdM authentication from a windows 10 workstation with AD authentication

I'm posting this here after spending the last 5 days searching google, going thru test cases as well as analyzing network traffic in the event that someone could either point me in the right direction ...
1
vote
1answer
733 views

How to use member of trusted domain in GPO?

I have two test domains and one trusts another. On trusting domain GPO I need to add a group from trusted domain to remote desktop users group which will apply to all computer objects in trusting ...
2
votes
1answer
2k views

Active Directory Authentication Through a Trust and Querying For Users From Trusted Domain

Domain A (Forest Tree Root) (Primary Domain) Domain B (Direct Outbound) (Direct Inbound) There is a two way trust between the two Forests Domain A/B. This scenario is used to connect two companies ...
1
vote
1answer
88 views

DNS configuration for domain trust

I am the DNS administrator for domain1.com. We are setting up a trust with child.domain2.com. This will allow us to resolve all resources in child.domain2.com. There is also a resource in domain2....
1
vote
1answer
841 views

Cross-Realm-Trust between Active Directory and MIT Kerberos

I am currently in the process of extending my development environment, which used to only run Linux servers so far, by adding machines running Windows Server 2016. The authentication process is ...
1
vote
1answer
2k views

LDAP simple bind to cross-forest Active Directory with 2-way trust

I have two forests (example.local and accounting.local) that have 2-way trust established. On accounting, I can bind using accounting\bind. However, it fails from example.local ldap_bind: Invalid ...
1
vote
1answer
792 views

Is SID Filtering Enabled?

I ran nltest /domain_trusts and received the following output: List of domain trusts: ... 1: TESTLAB TESTLAB.COM (NT 5) (Direct Outbound) ( Attr: 0x8 ) I don't understand the attribute field....
1
vote
1answer
21 views

How to know the origin of a certificate on a windows PC (Especially Win 10 embedded LTSB)

I have a specific type of problem but maybe someone have a hint for me: We have some systems with special PCIe-Hardware for which we wrote and signed a driver. One certificate in the path of trust is ...
1
vote
1answer
123 views

Proper way to manage privileged admin groups for two trusted Active Directory forests?

The scenario is: There are two domains (DomA and DomB) with a trust relationship. The relationship is forest wide with the exception that DomA can access resources in DomB, but users in DomB should ...
1
vote
0answers
404 views

How to set up Linux AD Authentication to Trusted Domain

I have successfully joined a CentOS 7 server to a Windows Server 2012R2 domain: domain1.local. This domain hosts test server objects that we've created for experimentation. domain1.local is the ...
0
votes
0answers
427 views

Active Directory: RPC Issues, Trust between 2003 and 2012

I've been having this ongoing issue that has been plaguing me. I am in charge of two domains: DOMAIN1 - Functional Level 2003 DOMAIN2 - Functional Level 2012 I was able to establish the trust ...
0
votes
0answers
781 views

LDAP query doesn't show members from a trusted domain

I have two domain A (W2K8 machine) and B (W2K12 machine) with an external non-transitive relationship with each other. I created a Security Local Domain group SLDG on A. Then I created a Security ...
1
vote
0answers
95 views

Can we use Forest Trust or ADFS to address administrative cost of disconnected AD users in Forest A with mailboxes in Forest B

Scenario: We currently have two domains under two forests ABC.com AND DEF.com each with their own exchange 2016 instance. We need to migrate mailboxes from ABC.com to DEF.com but we still want ABC....
0
votes
1answer
604 views

Read-only DC lost connection and client can't sign in

we have two site (office & factory). in factory site we have read-only Domain controller. connection of two sites is radio wireless and yesterday we lost connection because of storm. now users can'...
1
vote
1answer
1k views

Reading windows nltest /server /domain_trust output

I'm looking to get a quick accounting of how many trusts we have in our AD environment so I used nltest /server:<domain controller host> /domain_trusts /all_trusts It's easy enough to figure ...
1
vote
0answers
105 views

Can I create a child forest without domain admin in the parent forest?

I'm completely new to the Windows Server/AD thing. I'm a linux guy at heart and trying this Windows stuff is mind-boggling. I have an existing AD domain that I don't manage and is out of my control ...
1
vote
0answers
393 views

RDP connection gives black screen to users from different forest

I run a virtual Windows Server 2016 machine on Microsoft Azure. This machine is joined to a forest A. Forest A is in a bidirectional trust relationship with forest B. If I RDP to this machine with a ...
0
votes
3answers
1k views

AD forest one-way trust: can't list users from the other domain

So, we have two forests (AWS and On-Prem). The DCs can talk to each other and the one-way trust works fine. Here is the problem. If I create a share on the DC1 (in AWS), I can grant access to the ...
2
votes
2answers
3k views

DC with two-way forest trust does not see objects from another forest

I have 2 forests - domainA.com and domainB.net. There are two-way trust set up on each. When I try search objects located on domainB.net from domainA.com it gives me following error: The system ...
1
vote
0answers
42 views

How do you configure sid name lookup over a network trust for historical sids

I have the following problem with sid to name lookups. Domain A has been migrated to Domain B with sid history. Users in Domain B have their primary Domain B sid and a historical sid from Domain A. ...
0
votes
0answers
129 views

Is it possible and How to establish outgoing trust relationship from resource domain without any approvals in domain with users?

There is domain U with users and domain R with resources. I need to run IIS application on machine from domain R on behalf of concrete user from domain U (this account from U is used for NTLM ...
0
votes
1answer
1k views

Forest Trust relationship access denied

I have resource forest (domain1.net) set up for Exchange 2013 with a trust relationship to another forest (domain2.local) where users are set up. This has been running for a couple months without ...
0
votes
0answers
410 views

Limit One Domain in a two-way Trust for ADFS 2.0

We have two-way trust in our Active Directory environment to facilitate the migration of users from "Domain X" to "Domain A". We have multiple application pointing to ADFS Farm which is using ...
5
votes
3answers
5k views

Purposefully break trust relationship with Windows Domain

For testing purposes I am trying to purposefully break trust relationships with the Windows Domain. What is the quickest way to kill it off? "Unfortunately", broken trust relationships don't regularly ...
1
vote
0answers
722 views

One way external trust between domains

My company sells software solutions to customers and as part of the delivery we also provide the hardware and configuration. Despite on paper all the hardware and operating systems belonging to the ...
1
vote
0answers
383 views

Trust relationship not working in Windows server 2012?

Error: you don't have proper trust relationship with this workstation. I have two different forests, XYZ.com and ABC.com. I have made two way trust relationship between these forests with conditional ...
1
vote
0answers
201 views

Windows Server 2012R2 -> Trusted Root CA Store (Local Computer) not listed in SERVER HELLO / CERTIFICATE Request filed of TLS1.2 handshake

my company developed a .net based application (relying on SChannel) aimed at performing TLS1.2 mutual authentication between 2 instances of the same SW, one acting as client and the other one as ...
0
votes
1answer
189 views

Can Samba 3 still be used?

I am struggling with a trust relationship issue between a windows 7 machine and my companies samba 3 domain controller. The issue is only arising when I try to add a domain user to my machine for ...
0
votes
1answer
506 views

User Cross Domain Authentication Explanation

We have a domain in the 2008 R2 domain functional level....all DC's are 2008 R2. We also have a Windows 2000 domain. The domains are not trusted. From any server in Domain A (Windows 2008 R2), I can ...
0
votes
1answer
803 views

How to Delete Orphaned Domain

I am trying to remove child domain from parent domain therefore follow below link http://myblogs-amit.blogspot.com/2011/12/how-to-remove-default-trust_13.html Step01 to Step04 Successfully done but ...
0
votes
2answers
22k views

Command to check trust relation between 2 domains

Good Day, Do we have any command where we can check the trust relationship between 2 domains. Example : lets consider there is a domains called xyz.1.com and abc.1.com how can we know whether there ...
1
vote
2answers
663 views

Setup Domain Trust fictitious domains on dynamic IP's with Windows Server 2008 R2

Have a customer with two separate offices / companies, eg: domainone.local (Windows Server 2008 R2) domaintwo.pvt (Windows Server 2008) Each office has a dynamic IP when connecting to the internet. ...
0
votes
3answers
3k views

Re-establishing the Trust Relationship [closed]

I am on a network where communication is done through static IPs. On a fairly regular basis I need to swap machines, that is to say unplug a machine, lets say: 10.50.5.1 and plug in a new machine in ...
2
votes
0answers
608 views

Setup keystore and truststore in elastic beanstalk

Im new to AWS, mutual authentication. However I have not setup elastic bean stalk. I am working with a payment API. The organization that has setup the API requires a keystore and trust store to be ...
0
votes
0answers
3k views

Deleting two-way trusts in Windows AD

I want to remove two-way trust using netdom trust command on Windows Server 2012 r2, I am using "Run as Administrator" command prompt but still getting "Access Denied" Here is my command netdom ...
0
votes
2answers
4k views

validate domain trust command, netdom trust /verify doesn't work

I have an external trust with my Active Directory domain. I want to validate the trust from a command so that I can do it remotely and don't have to open Remote Desktop and navigate to the AD domains ...
4
votes
1answer
3k views

Netlogon - Domain Trust Secure Channel issues - Only on some DCs

We have a 2 domain environment. We were having issues with slow connections, authentication failures, and hung resources only during OFF-PEAK hours when there were very few users logged on. The ...