Questions tagged [trust-relationship]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
-1 votes
0 answers
21 views

Trusts - Active Directory - 0xc000019b

So I'am getting the follow error when try validate the trust between to active directory (on internal, other external) The outgoing trust was successfully validated. The secure channel (SC) reset on ...
David E.'s user avatar
0 votes
0 answers
37 views

Trust Relationship between this Workstation and the Primary Domain failed, but 4624 events are present

User got this error when user tried to login to his workstation. Usually this means that computer account password in AD and on the actual workstation is out of sync for some reason. According to ...
user2838376's user avatar
0 votes
0 answers
125 views

Which domain trusts to reset during forest recovery? Incoming, outgoing or both?

I understand the difference between an outgoing and an incoming trust I understand that the trust flow goes into one direction and the direction of access is the other way around I understand that ...
David Trevor's user avatar
0 votes
2 answers
245 views

Network share with an untrusted domain

We have a network share on a Windows Server 2022 which hosts a number of both "production" files as well as development files. We have two domains - a prod domain (ex. "prod.local")...
MBender's user avatar
  • 381
0 votes
1 answer
55 views

How does bind account work in subdomains in AD

We have a parent domain and multiple subdomains. We created a bind account under parent domain to read users and groups from all the subdomains. How does the account created under parent domain ...
Dran's user avatar
  • 1
0 votes
0 answers
453 views

Establish Trust Between Two Active Directory Domains with a Common Root

In my lab environment, I'd like to create a trust relation between two Active Directory domains that share a common root. One is home.acme.com and the other is work.acme.com. When I create both ...
Christopher King's user avatar
0 votes
0 answers
1k views

Users from a trusted domain cannot connect to remote desktop gateway

Trying since few days to have an RDP gateway allowing users from a tusted domain to connect to. The only error I can find in the error log is : The user "DOMAIN\login", on client computer &...
KAMI's user avatar
  • 1
1 vote
0 answers
287 views

Problems with netdom trust

First, I want to create a one way forest trust with this command on the "main.adds" domain : netdom trust main.adds /Domain:second.adds /Add /UserD:SECOND\administrator /PasswordD:* /UserO:...
CFou's user avatar
  • 61
0 votes
1 answer
538 views

Trouble setting up CES and CEP PKI in a trusted forest scenario

I have two AD domains with a two-way forest trust. I want computer accounts in DomainB to enroll for computer client auth certificates from the two-tier Windows CA in DomainA. I configured a ...
corndog's user avatar
-2 votes
1 answer
1k views

Can't find computer object in AD

I replaced ex-sysadmin and there is a laptop that is giving me an error of trust relationship. The computer object is not available in AD. But, I can ping the computer name. I don't know the password ...
Himanish Lekhi's user avatar
2 votes
1 answer
431 views

Restrict forest-trust to a single DC pair

We have two AD forests with a trust in place. fwDomain has been firewalled from accessing resources in corpDomain. corpDomain has one DC within the firewall boundary and has the ability to communicate ...
rmarles's user avatar
  • 21
2 votes
0 answers
1k views

Windows client cannot get cross-domain ticket, but a Linux one (from WSL) can

I am trying to and failing to authenticate my Kerberos credentials when doing ssh from a Windows 11 client joined to a Windows Server 2019 domain (let's call it AD.LOCAL) to a Linux host joined to a ...
chutz's user avatar
  • 7,988
0 votes
1 answer
450 views

Setting up a trust to an AD environment with DCs on premise and in Azure, how can I limit AD traffic to only the on-premise DCs?

We are setting up a trust between a stand-alone on-premise domain (DMZ from now on) and a corporate domain which is AD/AAD (synched) (CORP from now on) so that users from CORP can log into servers ...
R C's user avatar
  • 3
0 votes
1 answer
5k views

How can I set the 'The other domain supports Kerberos AES Encryption' setting programmatically?

In the GUI (Active Directory Domains and Trusts MMC Snap-in (domain.msc)), you can set the "The other domain supports Kerberos AES Encryption" setting for a trust relationship: I am looking ...
stackprotector's user avatar
0 votes
1 answer
241 views

Ubuntu 21.10 with Samba AD unable to create domain trust account

I am trying to add domain trust account for additional kerberos5 (MIT) domain in Samba AD DC with command: net rpc trustdom add <domain_name> -UAdministrator%<administrator_password> What ...
Sami Hulkko's user avatar
0 votes
0 answers
116 views

Application Requires Cross Domain Authentication - No trust

I've an application that going forward is going to require cross domain authentication using an AD service account across 2 separate organisations - for example domain A application needs to ...
user948548's user avatar
0 votes
1 answer
616 views

Ubuntu login fails with a user of a trusted IDM domain (AD)

We have an IDM Server on a Rocky Linux distro configured with a Trust to a Samba AD DC (also installed on a Rocky Linux). So we created a user 'usupru2' on Samba AD DC under adtest.uy domain. Then we ...
Mateo's user avatar
  • 11
0 votes
1 answer
79 views

Switched BizTalk's database domain, but cannot remove DC

I've inherited an older system involving BizTalk (Server 2010) where the application and its database were on separate servers on separate domains. There has been efforts to modernize the systems and ...
Temm's user avatar
  • 1
0 votes
0 answers
848 views

How can I force Active Directory integrated DNS to only return SRV records for specific domain controllers based on the subnet of the client?

I have a set of several offices joined using various combinations of IPsec VPNs and an MPLS network. The majority of sites form a mesh arrangement using the VPNs, but site B only has a single IPsec ...
Daniel Arkley's user avatar
1 vote
1 answer
120 views

Unable to rename the DN using trusted domain user credentials

I have two AD in which two-way trusts relationship(forest and transitive) exists. Trusted domain are trust1.com and trust2.com. I created a AD-User(TEST1) in trust2.com using administrator ...
user2956014's user avatar
1 vote
0 answers
242 views

Forest trust: SPN mismatch for non-fully-qualified name

Setup All computers running Windows Server 2019. Domain A Item Value Fully Qualified Domain Name DomainA DomainA.local User UserA [email protected] Server FileServer FileServer.DomainA.local ...
Chris Stankevitz's user avatar
1 vote
1 answer
5k views

Apache Guacamole Login with User from DomainA, rdp to Server from DomainB

Overview We log into Gucamole with a User from DomainA where we select a rdp-connection to a server from DomainB. Trusts DomainA to DomainB and vice versa: Type: External Kerberos AES Encryption ...
Manu's user avatar
  • 854
1 vote
1 answer
563 views

Active Directory trust fails (AWS Managed AD)

I've created AWS managed AD and try to create trust with my on-prem. After a lot of tries and solid research on the internet I keep getting this error : The remote domain ***** is not reachable. ...
sam's user avatar
  • 11
0 votes
2 answers
853 views

2-way trust between 2 server 2016 domains active, but unable to browse each others domains

Good afternoon, I have a 2 way transative trust between 2 domains, i have also validated them in the Active directory domains and trust tool, where they both show active. From each domain controller i ...
Hans Smeets's user avatar
0 votes
0 answers
34 views

Join PCs that were on old Windows 2012 server to new server AND new domain without breaking SIDS and trust

Background: Had a small 4 PC office on Server 2012r2 with domain named OLD-DOMAIN. Server was old and wonky and had to restore from full system image backup that was recent (as in a few days old). ...
SKidd's user avatar
  • 61
1 vote
1 answer
221 views

Active Directory 2016 trust issues

I am trying to set up a forest trust and use ADMT to migrate users using this set of instructions; ADMT Instructions . I am having issues getting the two-way trust to work. Domain A (testad.domain....
LegacyMindset's user avatar
1 vote
1 answer
880 views

GPO and Security Groups in multiple domain

I have 2 forests, each with one domain with a bidirectional trust. I have created security groups in forest A, to access folders, where I have added both users from forest A and B, the accesses are ...
chart's user avatar
  • 13
1 vote
1 answer
374 views

Forest trust relationship between WAN and LAN through Pfsense

I'm using Pfsense with 3 interfaces : LAN, DMZ and WAN. The LAN contains my Domain Controller and my main forest of course (abc.com), the DMZ contains some web servers. The other forest is located ...
Milorn Ovivias's user avatar
1 vote
0 answers
206 views

How do you monitor an external domain trust?

We have multiple external domain trusts with different companies, and while I know how to validate the trust in "Windows Domains and Trusts", I am wondering if anyone knows how to monitor it ...
Erick W's user avatar
  • 11
1 vote
0 answers
29 views

\\machinename cannot open network share while \\ipaddress work in cross domain

We have established a two-way trusted domain environment. All servers are Windows Server 2019. In server1.domainA.com there is shared drive. In server2.domainB.com, we tried to browse with \\server1 ...
Mark's user avatar
  • 217
0 votes
1 answer
518 views

Forest Trust Relationship and DNS

I am creating a new single domain Forest, SCP.com and I have an existing single domain Forest, ICS.com Have an existing internal DNS server in ICS.com that has a Forward Lookup Zone for the domain ...
DAdmin's user avatar
  • 1
0 votes
1 answer
2k views

How can I delete an outgoing trust on Windows Server when an internal error occurs?

Unfortunately, the Active Directory Domains and Trusts MMC Snap-in (domain.msc) lets you create an outgoing trust to a Domain Controller (in other words: specifying the name of a Domain Controller as ...
stackprotector's user avatar
0 votes
0 answers
241 views

Slow Application with User Accounts from other Domain - Active Directory Domain Trust Issue?

I have a strange issue and hope someone can help me finding the cause. Environment: 2 companies (let's say Company A and Company B) with seperate IT-infrastructures. Each one has its own network, own ...
Niko21's user avatar
  • 49
-1 votes
1 answer
908 views

Unable to change trusted users passwords from within trusting domain

I'm experiencing a very strange issue with a one-way trust setup where users from a trusted domain (Domain A) can successfully log in to the trusting domain (Domain B), however password change ...
wrathchild's user avatar
1 vote
0 answers
485 views

Unable To Establish a Two Way Trust Between AWS AD DS and a Dedicated AD Server

I have a bit of a unique situation, I have a series of AWS servers that all have Active Directory installed on them (DNS and a bunch of other things too) and are Domain Controllers, I'm trying to ...
David Rogers's user avatar
0 votes
1 answer
290 views

Active Directory vs Active Directory Trust

We have 2 forests/domains : ad.local (not managed by us) and ad2.local (managed by us) We setup a two way trust between them. Now let's say I have an app on a server joined to ad2.local : app.ad2....
preguenga's user avatar
0 votes
0 answers
206 views

AD Trusts deprecated with Server 2019?

I need to setup a AD Trust relationship between two forests. I'm unable to find a Microsoft doc for this case (all I can find is a short doc for Azure DS), is it still advised for on-premise Server ...
Patator's user avatar
  • 151
-1 votes
1 answer
223 views

Transitivity of trust when adding new domain

Suppose I have a domain trust between domain A(forest A), and domain B(forest B) (bi-directional, FOREST TRANSITIVE). Assuming I add domain C to forest A. At this point A trusts C, and B should trust ...
user2679290's user avatar
0 votes
0 answers
129 views

Active Directory Domain Trust - User Audit: AD-Users from Dom-A in AD-Groups in Dom-B

For our trusted corporation workflow we had installed some AD-Domain Trusts like that: One Active Directory "Master-Domain" with all AD-Users: Dom-A.extra.com Five extra Active Directory's for ...
steronz's user avatar
0 votes
1 answer
547 views

Remote Office Having Trust Relationship Issues Due to Tombstoned Domain Controller

All Windows 10 computers in our remote location are having domain trust relationship issues. The computers are able to login after a reboot takes place, but the issue repeats after the computer goes ...
confoundr's user avatar
  • 377
0 votes
1 answer
34 views

How to trust another Nameserver/Zone specificly?

For making sure a resolver is also able to resolve when not connected to the internet (which is usually not the case), I have configured a forward zone: zone "example.com" { type forward; ...
michi.0x5d's user avatar
0 votes
1 answer
3k views

user login from another domain (Transitive Trust Established)

I have setup a two way transitive forest trust between two domains (Domain A & Domain B) successfully. Now when I try to RDP as a user in domain A ([email protected]) into domain B it is ...
vishal's user avatar
  • 113
-1 votes
1 answer
6k views

External Domain Trust validation fails after creation.Domain not found?

I am trying to set up a 1-way trust in my lab. LAB.local is the trusted domain while RED.local is the trusting domain. Conditional forwarding is set up on both pointing to each other. DC01.LAB.local [...
Tiele Declercq's user avatar
0 votes
1 answer
572 views

Establishing security trust between two domains without VPN

We have a company we recently acquired and we would like for them to access our SQL Server Analysis Services (via Excel file) on our company's domain. They are external users with separate Windows ...
Gabe's user avatar
  • 167
2 votes
1 answer
2k views

Universal Groups not working across domain trusts

I have a problem with Universal groups across a trust - membership of the universal group gives rights from one domain in a forest but not from another domain in the same forest - I've set up a test ...
Ross's user avatar
  • 133
0 votes
1 answer
1k views

Restrict AD logon between child domains

Let's say that we have 3 domains (and 3 DC's) where contoso.local is the root domain, dep1.contoso.local is a child domain of contoso.local and dep2.contoso.local is another child domain of contoso....
stackoverflowuser's user avatar
0 votes
1 answer
794 views

Samba access with Redhat IdM authentication from a windows 10 workstation with AD authentication

I'm posting this here after spending the last 5 days searching google, going thru test cases as well as analyzing network traffic in the event that someone could either point me in the right direction ...
Mathieu D's user avatar
1 vote
1 answer
2k views

How to use member of trusted domain in GPO?

I have two test domains and one trusts another. On trusting domain GPO I need to add a group from trusted domain to remote desktop users group which will apply to all computer objects in trusting ...
sys's user avatar
  • 11
2 votes
1 answer
7k views

Active Directory Authentication Through a Trust and Querying For Users From Trusted Domain

Domain A (Forest Tree Root) (Primary Domain) Domain B (Direct Outbound) (Direct Inbound) There is a two way trust between the two Forests Domain A/B. This scenario is used to connect two companies ...
Wasim Hayatt's user avatar
1 vote
1 answer
597 views

DNS configuration for domain trust

I am the DNS administrator for domain1.com. We are setting up a trust with child.domain2.com. This will allow us to resolve all resources in child.domain2.com. There is also a resource in domain2....
Kevin's user avatar
  • 31