Windows Domain Trust Commands

|Active Directory, Domain Services, Microsoft

Before using these commands, make sure the domain controllers know about each other’s domains.  Configure DNS forwarders.

Establish a Trust

netdom trust <trusting domain> /Domain:<trusted domain>
  /userD:<domain admin> /passwordD:<password> /add /twoway
  /enablesidhistory:yes

 

Turn Off SID Filtering

netdom trust <trusting domain> /domain:<Trusted Domain>
  /quarantine:No /userD:<domain admin> /passwordD:<password>

 

Verify a Trust

netdom query /Domain:<trusted domain> /userD:<domain admin>
  /passwordD:<password> trust /verify

 

Remove a Trust

netdom trust <trusting domain> /Domain:<trusted domain>
  /userD:<domain admin> /passwordD:<password> /remove

 

List Trusts

NLTEST /trusted_domains
NLTEST /server:<server.name> /trusted_domains