Questions tagged [trust-relationship]
The trust-relationship tag has no usage guidance.
90
questions
4
votes
1
answer
5k
views
Netlogon - Domain Trust Secure Channel issues - Only on some DCs
We have a 2 domain environment. We were having issues with slow connections, authentication failures, and hung resources only during OFF-PEAK hours when there were very few users logged on.
The ...
-1
votes
1
answer
81
views
Trusts - Active Directory - 0xc000019b
So I'am getting the follow error when try validate the trust between to active directory (on internal, other external)
The outgoing trust was successfully validated.
The secure channel (SC) reset on ...
0
votes
0
answers
63
views
Trust Relationship between this Workstation and the Primary Domain failed, but 4624 events are present
User got this error when user tried to login to his workstation.
Usually this means that computer account password in AD and on the actual workstation is out of sync for some reason. According to ...
0
votes
2
answers
10k
views
validate domain trust command, netdom trust /verify doesn't work
I have an external trust with my Active Directory domain. I want to validate the trust from a command so that I can do it remotely and don't have to open Remote Desktop and navigate to the AD domains ...
0
votes
0
answers
133
views
Which domain trusts to reset during forest recovery? Incoming, outgoing or both?
I understand the difference between an outgoing and an incoming trust
I understand that the trust flow goes into one direction and the direction of access is the other way around
I understand that ...
0
votes
2
answers
307
views
Network share with an untrusted domain
We have a network share on a Windows Server 2022 which hosts a number of both "production" files as well as development files. We have two domains - a prod domain (ex. "prod.local")...
0
votes
1
answer
57
views
How does bind account work in subdomains in AD
We have a parent domain and multiple subdomains. We created a bind account under parent domain to read users and groups from all the subdomains. How does the account created under parent domain ...
0
votes
0
answers
497
views
Establish Trust Between Two Active Directory Domains with a Common Root
In my lab environment, I'd like to create a trust relation between two Active Directory domains that share a common root. One is home.acme.com and the other is work.acme.com. When I create both ...
0
votes
0
answers
1k
views
Users from a trusted domain cannot connect to remote desktop gateway
Trying since few days to have an RDP gateway allowing users from a tusted domain to connect to.
The only error I can find in the error log is :
The user "DOMAIN\login", on client computer &...
1
vote
0
answers
309
views
Problems with netdom trust
First, I want to create a one way forest trust with this command on the "main.adds" domain :
netdom trust main.adds /Domain:second.adds /Add /UserD:SECOND\administrator /PasswordD:* /UserO:...
0
votes
1
answer
583
views
Trouble setting up CES and CEP PKI in a trusted forest scenario
I have two AD domains with a two-way forest trust. I want computer accounts in DomainB to enroll for computer client auth certificates from the two-tier Windows CA in DomainA. I configured a ...
0
votes
1
answer
80
views
Switched BizTalk's database domain, but cannot remove DC
I've inherited an older system involving BizTalk (Server 2010) where the application and its database were on separate servers on separate domains.
There has been efforts to modernize the systems and ...
-2
votes
1
answer
1k
views
Can't find computer object in AD
I replaced ex-sysadmin and there is a laptop that is giving me an error of trust relationship.
The computer object is not available in AD. But, I can ping the computer name.
I don't know the password ...
1
vote
1
answer
380
views
Forest trust relationship between WAN and LAN through Pfsense
I'm using Pfsense with 3 interfaces : LAN, DMZ and WAN. The LAN contains my Domain Controller and my main forest of course (abc.com), the DMZ contains some web servers. The other forest is located ...
0
votes
3
answers
2k
views
AD forest one-way trust: can't list users from the other domain
So, we have two forests (AWS and On-Prem). The DCs can talk to each other and the one-way trust works fine.
Here is the problem.
If I create a share on the DC1 (in AWS), I can grant access to the ...
6
votes
4
answers
8k
views
Purposefully break trust relationship with Windows Domain
For testing purposes I am trying to purposefully break trust relationships with the Windows Domain. What is the quickest way to kill it off? "Unfortunately", broken trust relationships don't regularly ...
2
votes
1
answer
460
views
Restrict forest-trust to a single DC pair
We have two AD forests with a trust in place. fwDomain has been firewalled from accessing resources in corpDomain.
corpDomain has one DC within the firewall boundary and has the ability to communicate ...
0
votes
1
answer
4k
views
user login from another domain (Transitive Trust Established)
I have setup a two way transitive forest trust between two domains (Domain A & Domain B) successfully. Now when I try to RDP as a user in domain A ([email protected]) into domain B it is ...
2
votes
0
answers
2k
views
Windows client cannot get cross-domain ticket, but a Linux one (from WSL) can
I am trying to and failing to authenticate my Kerberos credentials when doing ssh from a Windows 11 client joined to a Windows Server 2019 domain (let's call it AD.LOCAL) to a Linux host joined to a ...
0
votes
1
answer
250
views
Ubuntu 21.10 with Samba AD unable to create domain trust account
I am trying to add domain trust account for additional kerberos5 (MIT) domain
in Samba AD DC with command:
net rpc trustdom add <domain_name>
-UAdministrator%<administrator_password>
What ...
0
votes
1
answer
6k
views
How can I set the 'The other domain supports Kerberos AES Encryption' setting programmatically?
In the GUI (Active Directory Domains and Trusts MMC Snap-in (domain.msc)), you can set the "The other domain supports Kerberos AES Encryption" setting for a trust relationship:
I am looking ...
0
votes
1
answer
481
views
Setting up a trust to an AD environment with DCs on premise and in Azure, how can I limit AD traffic to only the on-premise DCs?
We are setting up a trust between a stand-alone on-premise domain (DMZ from now on) and a corporate domain which is AD/AAD (synched) (CORP from now on) so that users from CORP can log into servers ...
1
vote
0
answers
494
views
Unable To Establish a Two Way Trust Between AWS AD DS and a Dedicated AD Server
I have a bit of a unique situation, I have a series of AWS servers that all have Active Directory installed on them (DNS and a bunch of other things too) and are Domain Controllers, I'm trying to ...
0
votes
0
answers
120
views
Application Requires Cross Domain Authentication - No trust
I've an application that going forward is going to require cross domain authentication using an AD service account across 2 separate organisations - for example domain A application needs to ...
0
votes
1
answer
621
views
Ubuntu login fails with a user of a trusted IDM domain (AD)
We have an IDM Server on a Rocky Linux distro configured with a Trust to a Samba AD DC (also installed on a Rocky Linux).
So we created a user 'usupru2' on Samba AD DC under adtest.uy domain.
Then we ...
1
vote
1
answer
6k
views
Is SID Filtering Enabled?
I ran nltest /domain_trusts and received the following output:
List of domain trusts:
...
1: TESTLAB TESTLAB.COM (NT 5) (Direct Outbound) ( Attr: 0x8 )
I don't understand the attribute field....
0
votes
0
answers
873
views
How can I force Active Directory integrated DNS to only return SRV records for specific domain controllers based on the subnet of the client?
I have a set of several offices joined using various combinations of IPsec VPNs and an MPLS network. The majority of sites form a mesh arrangement using the VPNs, but site B only has a single IPsec ...
1
vote
1
answer
133
views
Unable to rename the DN using trusted domain user credentials
I have two AD in which two-way trusts relationship(forest and transitive) exists. Trusted domain are trust1.com and trust2.com.
I created a AD-User(TEST1) in trust2.com using administrator ...
1
vote
1
answer
5k
views
Apache Guacamole Login with User from DomainA, rdp to Server from DomainB
Overview
We log into Gucamole with a User from DomainA where we select a rdp-connection to a server from DomainB.
Trusts
DomainA to DomainB and vice versa:
Type: External
Kerberos AES Encryption ...
1
vote
0
answers
247
views
Forest trust: SPN mismatch for non-fully-qualified name
Setup
All computers running Windows Server 2019.
Domain A
Item
Value
Fully Qualified
Domain Name
DomainA
DomainA.local
User
UserA
[email protected]
Server
FileServer
FileServer.DomainA.local
...
1
vote
1
answer
585
views
Active Directory trust fails (AWS Managed AD)
I've created AWS managed AD and try to create trust with my on-prem. After a lot of tries and solid research on the internet I keep getting this error :
The remote domain ***** is not reachable. ...
0
votes
2
answers
904
views
2-way trust between 2 server 2016 domains active, but unable to browse each others domains
Good afternoon, I have a 2 way transative trust between 2 domains, i have also validated them in the Active directory domains and trust tool, where they both show active.
From each domain controller i ...
0
votes
1
answer
2k
views
How can I delete an outgoing trust on Windows Server when an internal error occurs?
Unfortunately, the Active Directory Domains and Trusts MMC Snap-in (domain.msc) lets you create an outgoing trust to a Domain Controller (in other words: specifying the name of a Domain Controller as ...
0
votes
0
answers
34
views
Join PCs that were on old Windows 2012 server to new server AND new domain without breaking SIDS and trust
Background: Had a small 4 PC office on Server 2012r2 with domain named OLD-DOMAIN. Server was old and wonky and had to restore from full system image backup that was recent (as in a few days old).
...
1
vote
1
answer
238
views
Active Directory 2016 trust issues
I am trying to set up a forest trust and use ADMT to migrate users using this set of instructions; ADMT Instructions . I am having issues getting the two-way trust to work. Domain A (testad.domain....
1
vote
1
answer
926
views
GPO and Security Groups in multiple domain
I have 2 forests, each with one domain with a bidirectional trust.
I have created security groups in forest A, to access folders, where I have added both users from forest A and B, the accesses are ...
-1
votes
1
answer
6k
views
External Domain Trust validation fails after creation.Domain not found?
I am trying to set up a 1-way trust in my lab. LAB.local is the trusted domain while RED.local is the trusting domain. Conditional forwarding is set up on both pointing to each other. DC01.LAB.local [...
1
vote
0
answers
215
views
How do you monitor an external domain trust?
We have multiple external domain trusts with different companies, and while I know how to validate the trust in "Windows Domains and Trusts", I am wondering if anyone knows how to monitor it ...
1
vote
0
answers
29
views
\\machinename cannot open network share while \\ipaddress work in cross domain
We have established a two-way trusted domain environment. All servers are Windows Server 2019. In server1.domainA.com there is shared drive. In server2.domainB.com, we tried to browse with \\server1 ...
1
vote
0
answers
1k
views
How to set up Linux AD Authentication to Trusted Domain
I have successfully joined a CentOS 7 server to a Windows Server 2012R2 domain: domain1.local. This domain hosts test server objects that we've created for experimentation.
domain1.local is the ...
0
votes
1
answer
543
views
Forest Trust Relationship and DNS
I am creating a new single domain Forest, SCP.com and I have an existing single domain Forest, ICS.com
Have an existing internal DNS server in ICS.com that has a Forward Lookup Zone for the domain ...
-1
votes
1
answer
3k
views
Forest Trust relationship access denied
I have resource forest (domain1.net) set up for Exchange 2013 with a trust relationship to another forest (domain2.local) where users are set up. This has been running for a couple months without ...
0
votes
0
answers
248
views
Slow Application with User Accounts from other Domain - Active Directory Domain Trust Issue?
I have a strange issue and hope someone can help me finding the cause.
Environment:
2 companies (let's say Company A and Company B) with seperate IT-infrastructures.
Each one has its own network, own ...
-1
votes
1
answer
937
views
Unable to change trusted users passwords from within trusting domain
I'm experiencing a very strange issue with a one-way trust setup where users from a trusted domain (Domain A) can successfully log in to the trusting domain (Domain B), however password change ...
2
votes
1
answer
2k
views
Universal Groups not working across domain trusts
I have a problem with Universal groups across a trust - membership of the universal group gives rights from one domain in a forest but not from another domain in the same forest - I've set up a test ...
0
votes
1
answer
295
views
Active Directory vs Active Directory Trust
We have 2 forests/domains : ad.local (not managed by us) and ad2.local (managed by us)
We setup a two way trust between them.
Now let's say I have an app on a server joined to ad2.local : app.ad2....
0
votes
0
answers
213
views
AD Trusts deprecated with Server 2019?
I need to setup a AD Trust relationship between two forests. I'm unable to find a Microsoft doc for this case (all I can find is a short doc for Azure DS), is it still advised for on-premise Server ...
2
votes
1
answer
5k
views
LDAP simple bind to cross-forest Active Directory with 2-way trust
I have two forests (example.local and accounting.local) that have 2-way trust established. On accounting, I can bind using accounting\bind. However, it fails from example.local
ldap_bind: Invalid ...
-1
votes
1
answer
231
views
Transitivity of trust when adding new domain
Suppose I have a domain trust between domain A(forest A), and domain B(forest B) (bi-directional, FOREST TRANSITIVE).
Assuming I add domain C to forest A. At this point A trusts C, and B should trust ...
0
votes
0
answers
139
views
Active Directory Domain Trust - User Audit: AD-Users from Dom-A in AD-Groups in Dom-B
For our trusted corporation workflow we had installed some AD-Domain Trusts like that:
One Active Directory "Master-Domain" with all AD-Users:
Dom-A.extra.com
Five extra Active Directory's for ...