Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [trust-relationship]

The tag has no usage guidance.

0
votes
1answer
26 views

Restrict AD logon between child domains

Let's say that we have 3 domains (and 3 DC's) where contoso.local is the root domain, dep1.contoso.local is a child domain of contoso.local and dep2.contoso.local is another child domain of contoso....
0
votes
1answer
42 views

Samba access with Redhat IdM authentication from a windows 10 workstation with AD authentication

I'm posting this here after spending the last 5 days searching google, going thru test cases as well as analyzing network traffic in the event that someone could either point me in the right direction ...
1
vote
1answer
55 views

How to use member of trusted domain in GPO?

I have two test domains and one trusts another. On trusting domain GPO I need to add a group from trusted domain to remote desktop users group which will apply to all computer objects in trusting ...
2
votes
1answer
114 views

Active Directory Authentication Through a Trust and Querying For Users From Trusted Domain

Domain A (Forest Tree Root) (Primary Domain) Domain B (Direct Outbound) (Direct Inbound) There is a two way trust between the two Forests Domain A/B. This scenario is used to connect two companies ...
1
vote
1answer
45 views

DNS configuration for domain trust

I am the DNS administrator for domain1.com. We are setting up a trust with child.domain2.com. This will allow us to resolve all resources in child.domain2.com. There is also a resource in domain2....
1
vote
1answer
320 views

Cross-Realm-Trust between Active Directory and MIT Kerberos

I am currently in the process of extending my development environment, which used to only run Linux servers so far, by adding machines running Windows Server 2016. The authentication process is ...
1
vote
1answer
399 views

LDAP simple bind to cross-forest Active Directory with 2-way trust

I have two forests (example.local and accounting.local) that have 2-way trust established. On accounting, I can bind using accounting\bind. However, it fails from example.local ldap_bind: Invalid ...
1
vote
1answer
28 views

Is SID Filtering Enabled?

I ran nltest /domain_trusts and received the following output: List of domain trusts: ... 1: TESTLAB TESTLAB.COM (NT 5) (Direct Outbound) ( Attr: 0x8 ) I don't understand the attribute field....
1
vote
1answer
19 views

How to know the origin of a certificate on a windows PC (Especially Win 10 embedded LTSB)

I have a specific type of problem but maybe someone have a hint for me: We have some systems with special PCIe-Hardware for which we wrote and signed a driver. One certificate in the path of trust is ...
1
vote
1answer
38 views

Proper way to manage privileged admin groups for two trusted Active Directory forests?

The scenario is: There are two domains (DomA and DomB) with a trust relationship. The relationship is forest wide with the exception that DomA can access resources in DomB, but users in DomB should ...
1
vote
0answers
270 views

How to set up Linux AD Authentication to Trusted Domain

I have successfully joined a CentOS 7 server to a Windows Server 2012R2 domain: domain1.local. This domain hosts test server objects that we've created for experimentation. domain1.local is the ...
0
votes
0answers
126 views

Active Directory: dsquery across domains

I am struggling to use DSQUERY to convert a SID to a user name, for a user in a transitive trusted domain. I can successfully execute the following: Dsquery * -Filter "(ObjectSID=S-1-5-21-...
0
votes
0answers
167 views

Active Directory: RPC Issues, Trust between 2003 and 2012

I've been having this ongoing issue that has been plaguing me. I am in charge of two domains: DOMAIN1 - Functional Level 2003 DOMAIN2 - Functional Level 2012 I was able to establish the trust ...
0
votes
0answers
468 views

LDAP query doesn't show members from a trusted domain

I have two domain A (W2K8 machine) and B (W2K12 machine) with an external non-transitive relationship with each other. I created a Security Local Domain group SLDG on A. Then I created a Security ...
1
vote
0answers
83 views

Can we use Forest Trust or ADFS to address administrative cost of disconnected AD users in Forest A with mailboxes in Forest B

Scenario: We currently have two domains under two forests ABC.com AND DEF.com each with their own exchange 2016 instance. We need to migrate mailboxes from ABC.com to DEF.com but we still want ABC....
0
votes
1answer
297 views

Read-only DC lost connection and client can't sign in

we have two site (office & factory). in factory site we have read-only Domain controller. connection of two sites is radio wireless and yesterday we lost connection because of storm. now users can'...
1
vote
1answer
564 views

Reading windows nltest /server /domain_trust output

I'm looking to get a quick accounting of how many trusts we have in our AD environment so I used nltest /server:<domain controller host> /domain_trusts /all_trusts It's easy enough to figure ...
1
vote
0answers
95 views

Can I create a child forest without domain admin in the parent forest?

I'm completely new to the Windows Server/AD thing. I'm a linux guy at heart and trying this Windows stuff is mind-boggling. I have an existing AD domain that I don't manage and is out of my control ...
1
vote
0answers
225 views

RDP connection gives black screen to users from different forest

I run a virtual Windows Server 2016 machine on Microsoft Azure. This machine is joined to a forest A. Forest A is in a bidirectional trust relationship with forest B. If I RDP to this machine with a ...
0
votes
3answers
820 views

AD forest one-way trust: can't list users from the other domain

So, we have two forests (AWS and On-Prem). The DCs can talk to each other and the one-way trust works fine. Here is the problem. If I create a share on the DC1 (in AWS), I can grant access to the ...
2
votes
2answers
1k views

DC with two-way forest trust does not see objects from another forest

I have 2 forests - domainA.com and domainB.net. There are two-way trust set up on each. When I try search objects located on domainB.net from domainA.com it gives me following error: The system ...
1
vote
0answers
29 views

How do you configure sid name lookup over a network trust for historical sids

I have the following problem with sid to name lookups. Domain A has been migrated to Domain B with sid history. Users in Domain B have their primary Domain B sid and a historical sid from Domain A. ...
0
votes
0answers
126 views

Is it possible and How to establish outgoing trust relationship from resource domain without any approvals in domain with users?

There is domain U with users and domain R with resources. I need to run IIS application on machine from domain R on behalf of concrete user from domain U (this account from U is used for NTLM ...
0
votes
1answer
533 views

Forest Trust relationship access denied

I have resource forest (domain1.net) set up for Exchange 2013 with a trust relationship to another forest (domain2.local) where users are set up. This has been running for a couple months without ...
0
votes
0answers
297 views

Limit One Domain in a two-way Trust for ADFS 2.0

We have two-way trust in our Active Directory environment to facilitate the migration of users from "Domain X" to "Domain A". We have multiple application pointing to ADFS Farm which is using ...
5
votes
3answers
3k views

Purposefully break trust relationship with Windows Domain

For testing purposes I am trying to purposefully break trust relationships with the Windows Domain. What is the quickest way to kill it off? "Unfortunately", broken trust relationships don't regularly ...
1
vote
0answers
533 views

One way external trust between domains

My company sells software solutions to customers and as part of the delivery we also provide the hardware and configuration. Despite on paper all the hardware and operating systems belonging to the ...
1
vote
0answers
271 views

Trust relationship not working in Windows server 2012?

Error: you don't have proper trust relationship with this workstation. I have two different forests, XYZ.com and ABC.com. I have made two way trust relationship between these forests with conditional ...
1
vote
0answers
147 views

Windows Server 2012R2 -> Trusted Root CA Store (Local Computer) not listed in SERVER HELLO / CERTIFICATE Request filed of TLS1.2 handshake

my company developed a .net based application (relying on SChannel) aimed at performing TLS1.2 mutual authentication between 2 instances of the same SW, one acting as client and the other one as ...
0
votes
1answer
167 views

Can Samba 3 still be used?

I am struggling with a trust relationship issue between a windows 7 machine and my companies samba 3 domain controller. The issue is only arising when I try to add a domain user to my machine for ...
0
votes
1answer
351 views

User Cross Domain Authentication Explanation

We have a domain in the 2008 R2 domain functional level....all DC's are 2008 R2. We also have a Windows 2000 domain. The domains are not trusted. From any server in Domain A (Windows 2008 R2), I can ...
0
votes
1answer
505 views

How to Delete Orphaned Domain

I am trying to remove child domain from parent domain therefore follow below link http://myblogs-amit.blogspot.com/2011/12/how-to-remove-default-trust_13.html Step01 to Step04 Successfully done but ...
0
votes
2answers
14k views

Command to check trust relation between 2 domains

Good Day, Do we have any command where we can check the trust relationship between 2 domains. Example : lets consider there is a domains called xyz.1.com and abc.1.com how can we know whether there ...
1
vote
2answers
419 views

Setup Domain Trust fictitious domains on dynamic IP's with Windows Server 2008 R2

Have a customer with two separate offices / companies, eg: domainone.local (Windows Server 2008 R2) domaintwo.pvt (Windows Server 2008) Each office has a dynamic IP when connecting to the internet. ...
0
votes
3answers
2k views

Re-establishing the Trust Relationship [closed]

I am on a network where communication is done through static IPs. On a fairly regular basis I need to swap machines, that is to say unplug a machine, lets say: 10.50.5.1 and plug in a new machine in ...
0
votes
0answers
36 views

Internal user cant reset external user password

I have 2 separate forest with one trusting the other one way only, lets call them External and Internal. Users in the internal forest can authenticate in the external but not the other way around So ...
2
votes
0answers
523 views

Setup keystore and truststore in elastic beanstalk

Im new to AWS, mutual authentication. However I have not setup elastic bean stalk. I am working with a payment API. The organization that has setup the API requires a keystore and trust store to be ...
0
votes
0answers
2k views

Deleting two-way trusts in Windows AD

I want to remove two-way trust using netdom trust command on Windows Server 2012 r2, I am using "Run as Administrator" command prompt but still getting "Access Denied" Here is my command netdom ...
0
votes
2answers
2k views

validate domain trust command, netdom trust /verify doesn't work

I have an external trust with my Active Directory domain. I want to validate the trust from a command so that I can do it remotely and don't have to open Remote Desktop and navigate to the AD domains ...
4
votes
1answer
2k views

Netlogon - Domain Trust Secure Channel issues - Only on some DCs

We have a 2 domain environment. We were having issues with slow connections, authentication failures, and hung resources only during OFF-PEAK hours when there were very few users logged on. The ...
2
votes
1answer
1k views

Does AD one-way trust demand admin priviliges on both domains?

Does AD one-way trust demand admin priviliges on both domains? Say I'm domain admin for domain A, and I want to give user from domain B access to stuff on domain A, which they can reach by VPN. From ...
1
vote
1answer
1k views

the trust relationship between this workstation and the primary domain failed windows 7

First of all, I know how to solve this problem. but I really wonder why this issue has came out ??? I saw just one post that the reason for this error may be the system time difference on both ...
1
vote
1answer
51 views

Server frequently hangs, my client wants me to do X while the proper solution is Y

This question is more on etiquette rather than an actual server issue. 2 servers owned by a client of mine frequently stop responding (Fast, then really sluggish as in it takes 1 minute to execute ls,...
2
votes
1answer
910 views

Creating a cross-forest Trust between two Active Directory Forests hosted on Azure VMs? (separate subscriptions)

I see that it's possible to create a cross-forest Kerberos Trust between an on-premises AD Forest and a Forest hosted on Azure VMs. But is it also possible to create a cross-forest Trust between two ...
2
votes
0answers
519 views

Slow response time when using ADUC utility to search a trusted domain

Current Setup: I have child 2 domains, one in America (amer.domain.com) and one in Asia (asia.domain.com) in the same forest. Both domains are connected via MPLS links. In each physical site, there ...
0
votes
1answer
274 views

Not able to “Run As” any application on a server in the TRUSTING domain using an account from the TRUSTED domain

There are two domains: "dom1" and "dom2". "dom1" is the trusting domain. "dom2" is the trusted domain. I.e. there is a one way trust where domain "dom1" trusts domain "dom2". Servers joined to ...
1
vote
5answers
2k views

How to establish trust relationship when logging in with the old password and network disabled?

I have two computers in the same domain that I use, recently I changed the domain password on one of them. When I tried to login with the same account on the other machine I get: The trust ...