Questions tagged [trust-relationship]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
4 votes
1 answer
5k views

Netlogon - Domain Trust Secure Channel issues - Only on some DCs

We have a 2 domain environment. We were having issues with slow connections, authentication failures, and hung resources only during OFF-PEAK hours when there were very few users logged on. The ...
-1 votes
1 answer
81 views

Trusts - Active Directory - 0xc000019b

So I'am getting the follow error when try validate the trust between to active directory (on internal, other external) The outgoing trust was successfully validated. The secure channel (SC) reset on ...
0 votes
0 answers
63 views

Trust Relationship between this Workstation and the Primary Domain failed, but 4624 events are present

User got this error when user tried to login to his workstation. Usually this means that computer account password in AD and on the actual workstation is out of sync for some reason. According to ...
0 votes
2 answers
10k views

validate domain trust command, netdom trust /verify doesn't work

I have an external trust with my Active Directory domain. I want to validate the trust from a command so that I can do it remotely and don't have to open Remote Desktop and navigate to the AD domains ...
0 votes
0 answers
133 views

Which domain trusts to reset during forest recovery? Incoming, outgoing or both?

I understand the difference between an outgoing and an incoming trust I understand that the trust flow goes into one direction and the direction of access is the other way around I understand that ...
0 votes
2 answers
307 views

Network share with an untrusted domain

We have a network share on a Windows Server 2022 which hosts a number of both "production" files as well as development files. We have two domains - a prod domain (ex. "prod.local")...
0 votes
1 answer
57 views

How does bind account work in subdomains in AD

We have a parent domain and multiple subdomains. We created a bind account under parent domain to read users and groups from all the subdomains. How does the account created under parent domain ...
0 votes
0 answers
497 views

Establish Trust Between Two Active Directory Domains with a Common Root

In my lab environment, I'd like to create a trust relation between two Active Directory domains that share a common root. One is home.acme.com and the other is work.acme.com. When I create both ...
0 votes
0 answers
1k views

Users from a trusted domain cannot connect to remote desktop gateway

Trying since few days to have an RDP gateway allowing users from a tusted domain to connect to. The only error I can find in the error log is : The user "DOMAIN\login", on client computer &...
1 vote
0 answers
309 views

Problems with netdom trust

First, I want to create a one way forest trust with this command on the "main.adds" domain : netdom trust main.adds /Domain:second.adds /Add /UserD:SECOND\administrator /PasswordD:* /UserO:...
0 votes
1 answer
583 views

Trouble setting up CES and CEP PKI in a trusted forest scenario

I have two AD domains with a two-way forest trust. I want computer accounts in DomainB to enroll for computer client auth certificates from the two-tier Windows CA in DomainA. I configured a ...
0 votes
1 answer
80 views

Switched BizTalk's database domain, but cannot remove DC

I've inherited an older system involving BizTalk (Server 2010) where the application and its database were on separate servers on separate domains. There has been efforts to modernize the systems and ...
-2 votes
1 answer
1k views

Can't find computer object in AD

I replaced ex-sysadmin and there is a laptop that is giving me an error of trust relationship. The computer object is not available in AD. But, I can ping the computer name. I don't know the password ...
1 vote
1 answer
380 views

Forest trust relationship between WAN and LAN through Pfsense

I'm using Pfsense with 3 interfaces : LAN, DMZ and WAN. The LAN contains my Domain Controller and my main forest of course (abc.com), the DMZ contains some web servers. The other forest is located ...
0 votes
3 answers
2k views

AD forest one-way trust: can't list users from the other domain

So, we have two forests (AWS and On-Prem). The DCs can talk to each other and the one-way trust works fine. Here is the problem. If I create a share on the DC1 (in AWS), I can grant access to the ...
6 votes
4 answers
8k views

Purposefully break trust relationship with Windows Domain

For testing purposes I am trying to purposefully break trust relationships with the Windows Domain. What is the quickest way to kill it off? "Unfortunately", broken trust relationships don't regularly ...
2 votes
1 answer
460 views

Restrict forest-trust to a single DC pair

We have two AD forests with a trust in place. fwDomain has been firewalled from accessing resources in corpDomain. corpDomain has one DC within the firewall boundary and has the ability to communicate ...
0 votes
1 answer
4k views

user login from another domain (Transitive Trust Established)

I have setup a two way transitive forest trust between two domains (Domain A & Domain B) successfully. Now when I try to RDP as a user in domain A ([email protected]) into domain B it is ...
2 votes
0 answers
2k views

Windows client cannot get cross-domain ticket, but a Linux one (from WSL) can

I am trying to and failing to authenticate my Kerberos credentials when doing ssh from a Windows 11 client joined to a Windows Server 2019 domain (let's call it AD.LOCAL) to a Linux host joined to a ...
0 votes
1 answer
250 views

Ubuntu 21.10 with Samba AD unable to create domain trust account

I am trying to add domain trust account for additional kerberos5 (MIT) domain in Samba AD DC with command: net rpc trustdom add <domain_name> -UAdministrator%<administrator_password> What ...
0 votes
1 answer
6k views

How can I set the 'The other domain supports Kerberos AES Encryption' setting programmatically?

In the GUI (Active Directory Domains and Trusts MMC Snap-in (domain.msc)), you can set the "The other domain supports Kerberos AES Encryption" setting for a trust relationship: I am looking ...
0 votes
1 answer
481 views

Setting up a trust to an AD environment with DCs on premise and in Azure, how can I limit AD traffic to only the on-premise DCs?

We are setting up a trust between a stand-alone on-premise domain (DMZ from now on) and a corporate domain which is AD/AAD (synched) (CORP from now on) so that users from CORP can log into servers ...
1 vote
0 answers
494 views

Unable To Establish a Two Way Trust Between AWS AD DS and a Dedicated AD Server

I have a bit of a unique situation, I have a series of AWS servers that all have Active Directory installed on them (DNS and a bunch of other things too) and are Domain Controllers, I'm trying to ...
0 votes
0 answers
120 views

Application Requires Cross Domain Authentication - No trust

I've an application that going forward is going to require cross domain authentication using an AD service account across 2 separate organisations - for example domain A application needs to ...
0 votes
1 answer
621 views

Ubuntu login fails with a user of a trusted IDM domain (AD)

We have an IDM Server on a Rocky Linux distro configured with a Trust to a Samba AD DC (also installed on a Rocky Linux). So we created a user 'usupru2' on Samba AD DC under adtest.uy domain. Then we ...
1 vote
1 answer
6k views

Is SID Filtering Enabled?

I ran nltest /domain_trusts and received the following output: List of domain trusts: ... 1: TESTLAB TESTLAB.COM (NT 5) (Direct Outbound) ( Attr: 0x8 ) I don't understand the attribute field....
0 votes
0 answers
873 views

How can I force Active Directory integrated DNS to only return SRV records for specific domain controllers based on the subnet of the client?

I have a set of several offices joined using various combinations of IPsec VPNs and an MPLS network. The majority of sites form a mesh arrangement using the VPNs, but site B only has a single IPsec ...
1 vote
1 answer
133 views

Unable to rename the DN using trusted domain user credentials

I have two AD in which two-way trusts relationship(forest and transitive) exists. Trusted domain are trust1.com and trust2.com. I created a AD-User(TEST1) in trust2.com using administrator ...
1 vote
1 answer
5k views

Apache Guacamole Login with User from DomainA, rdp to Server from DomainB

Overview We log into Gucamole with a User from DomainA where we select a rdp-connection to a server from DomainB. Trusts DomainA to DomainB and vice versa: Type: External Kerberos AES Encryption ...
1 vote
0 answers
247 views

Forest trust: SPN mismatch for non-fully-qualified name

Setup All computers running Windows Server 2019. Domain A Item Value Fully Qualified Domain Name DomainA DomainA.local User UserA [email protected] Server FileServer FileServer.DomainA.local ...
1 vote
1 answer
585 views

Active Directory trust fails (AWS Managed AD)

I've created AWS managed AD and try to create trust with my on-prem. After a lot of tries and solid research on the internet I keep getting this error : The remote domain ***** is not reachable. ...
0 votes
2 answers
904 views

2-way trust between 2 server 2016 domains active, but unable to browse each others domains

Good afternoon, I have a 2 way transative trust between 2 domains, i have also validated them in the Active directory domains and trust tool, where they both show active. From each domain controller i ...
0 votes
1 answer
2k views

How can I delete an outgoing trust on Windows Server when an internal error occurs?

Unfortunately, the Active Directory Domains and Trusts MMC Snap-in (domain.msc) lets you create an outgoing trust to a Domain Controller (in other words: specifying the name of a Domain Controller as ...
0 votes
0 answers
34 views

Join PCs that were on old Windows 2012 server to new server AND new domain without breaking SIDS and trust

Background: Had a small 4 PC office on Server 2012r2 with domain named OLD-DOMAIN. Server was old and wonky and had to restore from full system image backup that was recent (as in a few days old). ...
1 vote
1 answer
238 views

Active Directory 2016 trust issues

I am trying to set up a forest trust and use ADMT to migrate users using this set of instructions; ADMT Instructions . I am having issues getting the two-way trust to work. Domain A (testad.domain....
1 vote
1 answer
926 views

GPO and Security Groups in multiple domain

I have 2 forests, each with one domain with a bidirectional trust. I have created security groups in forest A, to access folders, where I have added both users from forest A and B, the accesses are ...
-1 votes
1 answer
6k views

External Domain Trust validation fails after creation.Domain not found?

I am trying to set up a 1-way trust in my lab. LAB.local is the trusted domain while RED.local is the trusting domain. Conditional forwarding is set up on both pointing to each other. DC01.LAB.local [...
1 vote
0 answers
215 views

How do you monitor an external domain trust?

We have multiple external domain trusts with different companies, and while I know how to validate the trust in "Windows Domains and Trusts", I am wondering if anyone knows how to monitor it ...
1 vote
0 answers
29 views

\\machinename cannot open network share while \\ipaddress work in cross domain

We have established a two-way trusted domain environment. All servers are Windows Server 2019. In server1.domainA.com there is shared drive. In server2.domainB.com, we tried to browse with \\server1 ...
1 vote
0 answers
1k views

How to set up Linux AD Authentication to Trusted Domain

I have successfully joined a CentOS 7 server to a Windows Server 2012R2 domain: domain1.local. This domain hosts test server objects that we've created for experimentation. domain1.local is the ...
0 votes
1 answer
543 views

Forest Trust Relationship and DNS

I am creating a new single domain Forest, SCP.com and I have an existing single domain Forest, ICS.com Have an existing internal DNS server in ICS.com that has a Forward Lookup Zone for the domain ...
-1 votes
1 answer
3k views

Forest Trust relationship access denied

I have resource forest (domain1.net) set up for Exchange 2013 with a trust relationship to another forest (domain2.local) where users are set up. This has been running for a couple months without ...
0 votes
0 answers
248 views

Slow Application with User Accounts from other Domain - Active Directory Domain Trust Issue?

I have a strange issue and hope someone can help me finding the cause. Environment: 2 companies (let's say Company A and Company B) with seperate IT-infrastructures. Each one has its own network, own ...
-1 votes
1 answer
937 views

Unable to change trusted users passwords from within trusting domain

I'm experiencing a very strange issue with a one-way trust setup where users from a trusted domain (Domain A) can successfully log in to the trusting domain (Domain B), however password change ...
2 votes
1 answer
2k views

Universal Groups not working across domain trusts

I have a problem with Universal groups across a trust - membership of the universal group gives rights from one domain in a forest but not from another domain in the same forest - I've set up a test ...
0 votes
1 answer
295 views

Active Directory vs Active Directory Trust

We have 2 forests/domains : ad.local (not managed by us) and ad2.local (managed by us) We setup a two way trust between them. Now let's say I have an app on a server joined to ad2.local : app.ad2....
0 votes
0 answers
213 views

AD Trusts deprecated with Server 2019?

I need to setup a AD Trust relationship between two forests. I'm unable to find a Microsoft doc for this case (all I can find is a short doc for Azure DS), is it still advised for on-premise Server ...
2 votes
1 answer
5k views

LDAP simple bind to cross-forest Active Directory with 2-way trust

I have two forests (example.local and accounting.local) that have 2-way trust established. On accounting, I can bind using accounting\bind. However, it fails from example.local ldap_bind: Invalid ...
-1 votes
1 answer
231 views

Transitivity of trust when adding new domain

Suppose I have a domain trust between domain A(forest A), and domain B(forest B) (bi-directional, FOREST TRANSITIVE). Assuming I add domain C to forest A. At this point A trusts C, and B should trust ...
0 votes
0 answers
139 views

Active Directory Domain Trust - User Audit: AD-Users from Dom-A in AD-Groups in Dom-B

For our trusted corporation workflow we had installed some AD-Domain Trusts like that: One Active Directory "Master-Domain" with all AD-Users: Dom-A.extra.com Five extra Active Directory's for ...