Questions tagged [trust-relationship]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
1answer
27 views

Active Directory trust fails (AWS Managed AD)

I've created AWS managed AD and try to create trust with my on-prem. After a lot of tries and solid research on the internet I keep getting this error : The remote domain ***** is not reachable. ...
0
votes
2answers
51 views

2-way trust between 2 server 2016 domains active, but unable to browse each others domains

Good afternoon, I have a 2 way transative trust between 2 domains, i have also validated them in the Active directory domains and trust tool, where they both show active. From each domain controller i ...
0
votes
0answers
28 views

Join PCs that were on old Windows 2012 server to new server AND new domain without breaking SIDS and trust

Background: Had a small 4 PC office on Server 2012r2 with domain named OLD-DOMAIN. Server was old and wonky and had to restore from full system image backup that was recent (as in a few days old). ...
1
vote
1answer
27 views

Active Directory 2016 trust issues

I am trying to set up a forest trust and use ADMT to migrate users using this set of instructions; ADMT Instructions . I am having issues getting the two-way trust to work. Domain A (testad.domain....
1
vote
1answer
51 views

GPO and Security Groups in multiple domain

I have 2 forests, each with one domain with a bidirectional trust. I have created security groups in forest A, to access folders, where I have added both users from forest A and B, the accesses are ...
1
vote
1answer
193 views

Forest trust relationship between WAN and LAN through Pfsense

I'm using Pfsense with 3 interfaces : LAN, DMZ and WAN. The LAN contains my Domain Controller and my main forest of course (abc.com), the DMZ contains some web servers. The other forest is located ...
1
vote
0answers
35 views

How do you monitor an external domain trust?

We have multiple external domain trusts with different companies, and while I know how to validate the trust in "Windows Domains and Trusts", I am wondering if anyone knows how to monitor it ...
1
vote
0answers
22 views

\\machinename cannot open network share while \\ipaddress work in cross domain

We have established a two-way trusted domain environment. All servers are Windows Server 2019. In server1.domainA.com there is shared drive. In server2.domainB.com, we tried to browse with \\server1 ...
0
votes
0answers
246 views

Kerberos Errors in One-Way Trust

We are trying to get single sign-on working for our web application and not having much luck. The setup is two separate domain forests, clientdomain.com and serverdomain.com. The web application is ...
0
votes
1answer
32 views

Forest Trust Relationship and DNS

I am creating a new single domain Forest, SCP.com and I have an existing single domain Forest, ICS.com Have an existing internal DNS server in ICS.com that has a Forward Lookup Zone for the domain ...
0
votes
1answer
179 views

How can I delete an outgoing trust on Windows Server when an internal error occurs?

Unfortunately, the Active Directory Domains and Trusts MMC Snap-in (domain.msc) lets you create an outgoing trust to a Domain Controller (in other words: specifying the name of a Domain Controller as ...
0
votes
0answers
23 views

What firewall port I have to open to resolve this error “Some or all identify references could not be translated”'?

What does this error mean "An error occurred searching for username: Some or all identify references could not be translated" ? It occurred to me when using a tool (Microsoft Azure DevOps ...
0
votes
0answers
43 views

Slow Application with User Accounts from other Domain - Active Directory Domain Trust Issue?

I have a strange issue and hope someone can help me finding the cause. Environment: 2 companies (let's say Company A and Company B) with seperate IT-infrastructures. Each one has its own network, own ...
-1
votes
1answer
139 views

Unable to change trusted users passwords from within trusting domain

I'm experiencing a very strange issue with a one-way trust setup where users from a trusted domain (Domain A) can successfully log in to the trusting domain (Domain B), however password change ...
1
vote
0answers
155 views

Unable To Establish a Two Way Trust Between AWS AD DS and a Dedicated AD Server

I have a bit of a unique situation, I have a series of AWS servers that all have Active Directory installed on them (DNS and a bunch of other things too) and are Domain Controllers, I'm trying to ...
0
votes
1answer
96 views

Active Directory vs Active Directory Trust

We have 2 forests/domains : ad.local (not managed by us) and ad2.local (managed by us) We setup a two way trust between them. Now let's say I have an app on a server joined to ad2.local : app.ad2....
0
votes
0answers
49 views

AD Trusts deprecated with Server 2019?

I need to setup a AD Trust relationship between two forests. I'm unable to find a Microsoft doc for this case (all I can find is a short doc for Azure DS), is it still advised for on-premise Server ...
-1
votes
1answer
48 views

Transitivity of trust when adding new domain

Suppose I have a domain trust between domain A(forest A), and domain B(forest B) (bi-directional, FOREST TRANSITIVE). Assuming I add domain C to forest A. At this point A trusts C, and B should trust ...
0
votes
0answers
59 views

Active Directory Domain Trust - User Audit: AD-Users from Dom-A in AD-Groups in Dom-B

For our trusted corporation workflow we had installed some AD-Domain Trusts like that: One Active Directory "Master-Domain" with all AD-Users: Dom-A.extra.com Five extra Active Directory's for ...
0
votes
1answer
239 views

Remote Office Having Trust Relationship Issues Due to Tombstoned Domain Controller

All Windows 10 computers in our remote location are having domain trust relationship issues. The computers are able to login after a reboot takes place, but the issue repeats after the computer goes ...
0
votes
1answer
24 views

How to trust another Nameserver/Zone specificly?

For making sure a resolver is also able to resolve when not connected to the internet (which is usually not the case), I have configured a forward zone: zone "example.com" { type forward; ...
0
votes
1answer
898 views

user login from another domain (Transitive Trust Established)

I have setup a two way transitive forest trust between two domains (Domain A & Domain B) successfully. Now when I try to RDP as a user in domain A (admin@domainA.com) into domain B it is ...
-1
votes
1answer
3k views

External Domain Trust validation fails after creation.Domain not found?

I am trying to set up a 1-way trust in my lab. LAB.local is the trusted domain while RED.local is the trusting domain. Conditional forwarding is set up on both pointing to each other. DC01.LAB.local [...
0
votes
1answer
267 views

Establishing security trust between two domains without VPN

We have a company we recently acquired and we would like for them to access our SQL Server Analysis Services (via Excel file) on our company's domain. They are external users with separate Windows ...
2
votes
1answer
550 views

Universal Groups not working across domain trusts

I have a problem with Universal groups across a trust - membership of the universal group gives rights from one domain in a forest but not from another domain in the same forest - I've set up a test ...
0
votes
1answer
272 views

Restrict AD logon between child domains

Let's say that we have 3 domains (and 3 DC's) where contoso.local is the root domain, dep1.contoso.local is a child domain of contoso.local and dep2.contoso.local is another child domain of contoso....
0
votes
1answer
451 views

Samba access with Redhat IdM authentication from a windows 10 workstation with AD authentication

I'm posting this here after spending the last 5 days searching google, going thru test cases as well as analyzing network traffic in the event that someone could either point me in the right direction ...
1
vote
1answer
1k views

How to use member of trusted domain in GPO?

I have two test domains and one trusts another. On trusting domain GPO I need to add a group from trusted domain to remote desktop users group which will apply to all computer objects in trusting ...
2
votes
1answer
3k views

Active Directory Authentication Through a Trust and Querying For Users From Trusted Domain

Domain A (Forest Tree Root) (Primary Domain) Domain B (Direct Outbound) (Direct Inbound) There is a two way trust between the two Forests Domain A/B. This scenario is used to connect two companies ...
1
vote
1answer
200 views

DNS configuration for domain trust

I am the DNS administrator for domain1.com. We are setting up a trust with child.domain2.com. This will allow us to resolve all resources in child.domain2.com. There is also a resource in domain2....
1
vote
1answer
1k views

Cross-Realm-Trust between Active Directory and MIT Kerberos

I am currently in the process of extending my development environment, which used to only run Linux servers so far, by adding machines running Windows Server 2016. The authentication process is ...
1
vote
1answer
3k views

LDAP simple bind to cross-forest Active Directory with 2-way trust

I have two forests (example.local and accounting.local) that have 2-way trust established. On accounting, I can bind using accounting\bind. However, it fails from example.local ldap_bind: Invalid ...
1
vote
1answer
2k views

Is SID Filtering Enabled?

I ran nltest /domain_trusts and received the following output: List of domain trusts: ... 1: TESTLAB TESTLAB.COM (NT 5) (Direct Outbound) ( Attr: 0x8 ) I don't understand the attribute field....
1
vote
1answer
33 views

How to know the origin of a certificate on a windows PC (Especially Win 10 embedded LTSB)

I have a specific type of problem but maybe someone have a hint for me: We have some systems with special PCIe-Hardware for which we wrote and signed a driver. One certificate in the path of trust is ...
1
vote
1answer
281 views

Proper way to manage privileged admin groups for two trusted Active Directory forests?

The scenario is: There are two domains (DomA and DomB) with a trust relationship. The relationship is forest wide with the exception that DomA can access resources in DomB, but users in DomB should ...
1
vote
0answers
556 views

How to set up Linux AD Authentication to Trusted Domain

I have successfully joined a CentOS 7 server to a Windows Server 2012R2 domain: domain1.local. This domain hosts test server objects that we've created for experimentation. domain1.local is the ...
0
votes
0answers
615 views

Active Directory: RPC Issues, Trust between 2003 and 2012

I've been having this ongoing issue that has been plaguing me. I am in charge of two domains: DOMAIN1 - Functional Level 2003 DOMAIN2 - Functional Level 2012 I was able to establish the trust ...
0
votes
0answers
941 views

LDAP query doesn't show members from a trusted domain

I have two domain A (W2K8 machine) and B (W2K12 machine) with an external non-transitive relationship with each other. I created a Security Local Domain group SLDG on A. Then I created a Security ...
1
vote
0answers
100 views

Can we use Forest Trust or ADFS to address administrative cost of disconnected AD users in Forest A with mailboxes in Forest B

Scenario: We currently have two domains under two forests ABC.com AND DEF.com each with their own exchange 2016 instance. We need to migrate mailboxes from ABC.com to DEF.com but we still want ABC....
0
votes
1answer
781 views

Read-only DC lost connection and client can't sign in

we have two site (office & factory). in factory site we have read-only Domain controller. connection of two sites is radio wireless and yesterday we lost connection because of storm. now users can'...
1
vote
1answer
2k views

Reading windows nltest /server /domain_trust output

I'm looking to get a quick accounting of how many trusts we have in our AD environment so I used nltest /server:<domain controller host> /domain_trusts /all_trusts It's easy enough to figure ...
1
vote
0answers
119 views

Can I create a child forest without domain admin in the parent forest?

I'm completely new to the Windows Server/AD thing. I'm a linux guy at heart and trying this Windows stuff is mind-boggling. I have an existing AD domain that I don't manage and is out of my control ...
1
vote
0answers
509 views

RDP connection gives black screen to users from different forest

I run a virtual Windows Server 2016 machine on Microsoft Azure. This machine is joined to a forest A. Forest A is in a bidirectional trust relationship with forest B. If I RDP to this machine with a ...
0
votes
3answers
2k views

AD forest one-way trust: can't list users from the other domain

So, we have two forests (AWS and On-Prem). The DCs can talk to each other and the one-way trust works fine. Here is the problem. If I create a share on the DC1 (in AWS), I can grant access to the ...
2
votes
2answers
3k views

DC with two-way forest trust does not see objects from another forest

I have 2 forests - domainA.com and domainB.net. There are two-way trust set up on each. When I try search objects located on domainB.net from domainA.com it gives me following error: The system ...
1
vote
0answers
57 views

How do you configure sid name lookup over a network trust for historical sids

I have the following problem with sid to name lookups. Domain A has been migrated to Domain B with sid history. Users in Domain B have their primary Domain B sid and a historical sid from Domain A. ...
0
votes
0answers
131 views

Is it possible and How to establish outgoing trust relationship from resource domain without any approvals in domain with users?

There is domain U with users and domain R with resources. I need to run IIS application on machine from domain R on behalf of concrete user from domain U (this account from U is used for NTLM ...
-1
votes
1answer
2k views

Forest Trust relationship access denied

I have resource forest (domain1.net) set up for Exchange 2013 with a trust relationship to another forest (domain2.local) where users are set up. This has been running for a couple months without ...
0
votes
0answers
424 views

Limit One Domain in a two-way Trust for ADFS 2.0

We have two-way trust in our Active Directory environment to facilitate the migration of users from "Domain X" to "Domain A". We have multiple application pointing to ADFS Farm which is using ...
5
votes
3answers
5k views

Purposefully break trust relationship with Windows Domain

For testing purposes I am trying to purposefully break trust relationships with the Windows Domain. What is the quickest way to kill it off? "Unfortunately", broken trust relationships don't regularly ...