You are currently offline, waiting for your internet to reconnect

How to Create a Trust Relationship from One Computer

This article was previously published under Q111565
A trust relationship is a link between two different domains, where onedomain honors the users of another domain, trusting that other domain toauthenticate the accounts of its own users.

There are normally two steps required to create a trust relationship.First, one domain must permit a second domain to trust it. Then the seconddomain must be set to trust the first domain. Because the trustrelationship is not yet established, these two steps often need to beperformed by separate administrators. There are other ways to establishtrust relationships.

One way requires only that an identical user account with administrativeprivileges be created on both domains. This might be an option for thosenetwork administrators who have identical passwords for all theadministrative accounts or, at least, know the passwords and can changethem while setting up the trust relationship.

NOTE: Keep in mind that creating duplicate accounts on different domainsdefeats the purpose of having one account for the whole network, which isone of the key features of Windows NT Advance Server networks. Changes madeto one account must be changed on the other domain as well.

Procedure for Setting Up a Trust Relationship from One Computer

For this procedure assume there two domains, A and B. You are currentlylogged onto domain A which will be the trusting domain. Domain B will bethe trusted domain. To set up the trust relationship from a singlecomputer, perform the following steps:

  1. Create an identical user name and password on both domains with domain administrative rights.
  2. Make sure you are logged onto domain A.
  3. From User Manager for Domains (note the title bar displays "User Manager- A"), choose Select Domain from the User menu. Type B (the title bar nowdisplays "User Manager - B").
  4. From the Policy menu, choose Trust Relationship. Choose Add and type A.Enter a password that you will use on domain A to trust domain B. Domain Ashould now be listed under Permitted to Trust this Domain. Close the TrustRelationship dialog box.
  5. From the User menu choose Select Domain and type A. The title bar shouldread "User Manager - A."
  6. From the Policy menu, choose Trust Relationship. Add domain B and usethe same password you used in Step 4.

    A dialog box appears notifying you, "Trust relationship with B successfullyestablished."
System Guide for Microsoft Windows NT Advanced Server, chapter 13 "User
   Manager for Domains"				

Article ID: 111565 - Last Review: 10/31/2006 19:14:44 - Revision: 1.1

Microsoft Windows NT Advanced Server 3.1

  • kbnetwork KB111565