Questions tagged [trust-relationship]
81 questions
1
vote
1 answer
Is SID Filtering Enabled?
I ran nltest /domain_trusts and received the following output:
List of domain trusts:
...
1: TESTLAB TESTLAB.COM (NT 5) (Direct Outbound) ( Attr: 0x8 )
I don't understand the attribute field. From this output can you tell if this is an…
![](../../users/profiles/481186.webp)
James
- 11
- 1
- 2
1
vote
1 answer
How to know the origin of a certificate on a windows PC (Especially Win 10 embedded LTSB)
I have a specific type of problem but maybe someone have a hint for me:
We have some systems with special PCIe-Hardware for which we wrote and signed a driver. One certificate in the path of trust is the "Versigin Class 3 Code Signing 2010 CA" (I…
![](../../users/profiles/412074.webp)
Mangosniper
- 23
- 5
1
vote
1 answer
Proper way to manage privileged admin groups for two trusted Active Directory forests?
The scenario is:
There are two domains (DomA and DomB) with a trust relationship. The relationship is forest wide with the exception that DomA can access resources in DomB, but users in DomB should not have access to DomA.
In Domain A, there are…
![](../../users/profiles/243351.webp)
Marko Farkas
- 163
- 3
- 11
1
vote
0 answers
How to set up Linux AD Authentication to Trusted Domain
I have successfully joined a CentOS 7 server to a Windows Server 2012R2 domain: domain1.local. This domain hosts test server objects that we've created for experimentation.
domain1.local is the trusting party to another Windows Server 2012R2…
![](../../users/profiles/43822.webp)
swasheck
- 713
- 9
- 20
1
vote
0 answers
Can we use Forest Trust or ADFS to address administrative cost of disconnected AD users in Forest A with mailboxes in Forest B
Scenario:
We currently have two domains under two forests ABC.com AND DEF.com each with their own exchange 2016 instance. We need to migrate mailboxes from ABC.com to DEF.com but we still want ABC.com users to logon to their desktop as ABC.com…
![](../../users/profiles/448827.webp)
da5id
- 11
- 1
1
vote
1 answer
Reading windows nltest /server /domain_trust output
I'm looking to get a quick accounting of how many trusts we have in our AD environment so I used nltest /server: /domain_trusts /all_trusts
It's easy enough to figure out where the 1 and 2 way trusts are but I can't find…
![](../../users/profiles/437267.webp)
ps2005
- 13
- 5
1
vote
0 answers
Can I create a child forest without domain admin in the parent forest?
I'm completely new to the Windows Server/AD thing. I'm a linux guy at heart and trying this Windows stuff is mind-boggling.
I have an existing AD domain that I don't manage and is out of my control which I want as the parent domain. I'm trying to…
![](../../users/profiles/345920.webp)
Jamie Scott
- 141
- 5
1
vote
0 answers
RDP connection gives black screen to users from different forest
I run a virtual Windows Server 2016 machine on Microsoft Azure. This machine is joined to a forest A. Forest A is in a bidirectional trust relationship with forest B.
If I RDP to this machine with a user from forest B, I am able to establish a…
![](../../users/profiles/429951.webp)
Magnus
- 255
- 1
- 2
- 7
1
vote
0 answers
How do you configure sid name lookup over a network trust for historical sids
I have the following problem with sid to name lookups.
Domain A has been migrated to Domain B with sid history.
Users in Domain B have their primary Domain B sid and a historical sid from Domain A.
I have a 2 way transitive trust between Domain B…
![](../../users/profiles/421065.webp)
unknownsidAdmin
- 11
- 1
1
vote
0 answers
One way external trust between domains
My company sells software solutions to customers and as part of the delivery we also provide the hardware and configuration.
Despite on paper all the hardware and operating systems belonging to the customer, we perform all of the administration…
![](../../users/profiles/408703.webp)
JP Trust
- 11
- 1
1
vote
0 answers
Trust relationship not working in Windows server 2012?
Error: you don't have proper trust relationship with this workstation.
I have two different forests, XYZ.com and ABC.com. I have made two way trust relationship between these forests with conditional forwarder configured accordingly.
I am facing a…
![](../../users/profiles/392380.webp)
Karan Nadagoudar
- 136
- 3
1
vote
0 answers
Windows Server 2012R2 -> Trusted Root CA Store (Local Computer) not listed in SERVER HELLO / CERTIFICATE Request filed of TLS1.2 handshake
my company developed a .net based application (relying on SChannel) aimed at performing TLS1.2 mutual authentication between 2 instances of the same SW, one acting as client and the other one as server in the TLS1.2 mutual authentication…
![](../../users/profiles/296374.webp)
Ottootto
- 11
- 1
- 5
1
vote
2 answers
Command to check trust relation between 2 domains
Good Day,
Do we have any command where we can check the trust relationship between 2 domains.
Example :
lets consider there is a domains called xyz.1.com and abc.1.com how can we know whether there is a trust between xyz and abc domains any direct…
![](../../users/profiles/260847.webp)
vikas
- 329
- 3
- 6
- 13
1
vote
2 answers
Setup Domain Trust fictitious domains on dynamic IP's with Windows Server 2008 R2
Have a customer with two separate offices / companies, eg:
domainone.local (Windows Server 2008 R2)
domaintwo.pvt (Windows Server 2008)
Each office has a dynamic IP when connecting to the internet.
Is it possible to setup a trust between the two…
![](../../users/profiles/312904.webp)
SupaMonkey
- 113
- 4
1
vote
1 answer
the trust relationship between this workstation and the primary domain failed windows 7
First of all, I know how to solve this problem.
but I really wonder why this issue has came out ???
I saw just one post that the reason for this error may be the system time difference on both machines. If they differ too much (think 2 hours or…
![](../../users/profiles/319518.webp)
PYO
- 91
- 1
- 1
- 6