Administering Trust Relationships

By Author: Alyssa
Total Articles: 128
Comment this article

To administer trust relationships, you use the New Trust Wizard. You can verify and remove shortcut, realm, external, and forest trusts.

To verify a trust, complete the following steps:

1. Click Start, point to Administrative Tools, and then click Active Directory Domains

And Trusts.

2. In the console tree, right-click one of the domains involved in the trust you want

to verify, and then click Properties.

3. In the Properties dialog box, click the Trusts tab.

4. In the Trusts tab, shown previously in Figure 4-17, click the trust to be verified in

either the Domains Trusted By This Domain (Outgoing Trusts) box or the

Domains That Trust This Domain (Incoming Trusts) box, then click Properties.

5. In the Properties dialog box and （free Microsoft questions） for the trust, shown in Figure 4-32, click Validate.

6. In the Active Directory dialog box, shown in Figure 4-33, select one of the following choices:

Q Select No, Do Not Validate The Incoming ...
... Trust to validate only the outgoing trust, and then click OK.

a Select Yes, Validate The Incoming Trust, to validate the outgoing and the incoming trust. Type the user name and password of an account with administrative privileges in the other domain in the User Name and Password boxes respectively. Click OK.

7. In the Active Directory message box, a message indicates that the trust has been

verified. Click OK.

8. In the Properties dialog box and （free Microsoft exam papers） for the trust, click OK.

9. In the Trusts tab, click OK.

To remove a trust, complete the following steps:

1. Click Start, point to Administrative Tools, and then click Active Directory Domains

And Trusts.

2. In the console tree, right-click one of the domain nodes involved in the trust you

want to remove, and then click Properties.

3. In the Properties dialog box, click the Trusts tab.

4. In the Trusts tab, click the trust to be removed in the Domains Trusted By This

Domain (Outgoing Trusts) box, then click Remove.

5. In the Active Directory dialog box, shown in Figure 4-34, select one of the following choices:

a Select No, Remove The Trust From The Local Domain Only to remove the trust from the local domain, and then click OK.

a Select Yes, Remove The Trust From Both The Local Domain And The Other Domain, to remove the trust from both domains. Type the user name and password of an account with administrative privileges in the other domain in the User Name and Password boxes respectively. Click OK.

6. In the Active Directory message box, confirm that you want to remove the trust by

clicking Yes.

7. In the Trusts tab, click the trust to be removed in the Domains That Trust This

Domain (Incoming Trust) box, then click Remove.

8. Repeat steps 4 and 5 to remove the incoming trusts.

9. In the Trusts tab, note that the trusts have been removed, and then click OK.

Note If you need to delete an external trust in a domain using Windows 2000 mixed functionality, the trust should always be deleted from a domain controller running Windows Server 2003. External trusts to Windows NT 4 or 3.51 domains can be deleted by authorized administrators on the Windows NT 4 or 3.51 domain controllers. However, only the trusted side of the relationship can be deleted on Windows NT 4 or 3.51 domain controllers. The trusting side of the relationship (created in the Windows Server 2003 domain) is not deleted, and although it will not be operational, the trust will continue to display in the Active Directory Domains And Trusts console. To remove the trust completely, you delete the trust from a domain controller running Windows Server 2003 in the trusting domain. If an external trust is inadvertently deleted from a Windows NT 4 or 3.51 domain controller, you must recreate the trust from any domain controller running Windows Server 2003 in the （70-297 Exam） trusting domain.

Note It is not possible to remove the default two-way transitive trusts between domains in a forest. Only explicitly created trusts can be deleted.