Creating And Administering Trusts Using The Command Line

By Author: smileyi
Total Articles: 31
Comment this article

In addition to creating and administering trusts using the Windows interface, you can also create and administer most trusts by using the Netdom.exe: Windows Domain Manager command line tool, included with the Windows Support Tools on the Windows Server 2003 Setup CD-ROM. You use the netdom trust command to create, verify, or reset a trust relationship between domains.
Netdom trust has the following syntax:
Specifies the name of the trusting domain.
Specifies the name of the trusted domain. If the parameter is omitted, then the domain that the current computer belongs to is used.
Specifies the user account that makes the connection with the trusting domain. If this parameter is omitted, the current user account is used. MCSE Exam
Specifies the password of the user account that is specified in the parameter. Use * to be prompted for the password.
Verifies the secure channel secrets upon which a specific trust is based.
Resets the trust secret between trusted domains or between the domain controller and the workstation.
Specifies a new trust ...
... password. This parameter is valid only with the add parameter and only if one of the domains specified is a non-Windows Kerberos realm. The trust password is set on the Windows domain only, which means that credentials are not needed for the non-Windows domain.
Specifies to create a trust. MCSE Certification
Indicates that the trust is created to a non-Windows Kerberos realm. The realm parameter is valid only with the add and password parameters.