Specifies To Break A Trust

By Author: smileyi
Total Articles: 30
Comment this article

Removes both the trusted domain object and the cross-reference object for the specified domain from the forest. MCSE Exam This is used to clean up decommissioned domains that are no longer in use and were not able to be removed by using the Active Directory Installation wizard. This can occur if the domain controller for that domain was disabled or damaged and there were no domain controllers or it was not possible to recover the domain controller from backup media. This parameter is valid only when the /remove parameter is specified.

Specifies to establish a two-way trust relationship rather than a one-way trust relationship.

Specifies to exercise the Kerberos protocol between a workstation and a target domain. This parameter is valid only when the /verify parameter is specified.

Specifies whether to set a transitive or nontransitive trust. MCSE Certification This parameter is valid only for a non-Windows Kerberos realm. Non-Windows Kerberos trusts are created as nontransitive. If a value is omitted, then the current transitivity ...
... state is displayed. Yes sets the realm to a transitive trust. No sets the realm to a nontransitive trust.

Specifies verbose output. By default, only the result of the operation is reported. If /verbose is specified, the output lists the success or failure of each transaction necessary to perform the operation as well as returning an error level based on the success (0) or failure (1) of the operation.

Note Netdom cannot be used to create a forest trust. You can type the command netdom query trust to see a list of existing trust relationships.

For further information about using Netdom to create and administer trusts, refer to Windows Support Tools help.

Off the Record The Nltest tool can also be used to manage trusts as well. IT certification Nltest is an older tool typically utilized for troubleshooting issues relating to Windows NT 4.0 clients and domains. Still, you can use it with Windows Server 2003 computers and domains. For example, try typing the following command at a Command Prompt on Serverl: nltest For more information on the capabilities of Nltest, see Support Tools Help (part of the Windows Support Tools).