You are currently offline, waiting for your internet to reconnect

How to build and reset a trust relationship from a command line

This article was previously published under Q175025
SUMMARY
The information in this article provides a way to build a trustrelationship between two domains from a command line. To do this, use theNETDOM command line utility that comes with the Windows NT 4.0 Resource KitSupplement 2.

CAUTION: The method described in this article has not been extensivelytested in large installations. Microsoft cannot guarantee that modificationof domains as recommended herein will accomplish the objective described inthis article under all circumstances and in all configurations.
MORE INFORMATION
Suppose MYMASTERDOM is the name of the master domain (that is, the trusteddomain) and MYRESOURCEDOM the name of the resource domain (the trustingdomain) that will trust the master domain.

With NETDOM, you can build the trust relationship from the command line. Todo this, perform the following steps:

  1. On the master domain, use the following command to create a resource computer account (note that this command should appear on a single line):

    NETDOM /Domain:MYMASTERDOM RESOURCE MYRESOURCEDOM <trust password> /ADD
  2. On the resource domain, use the following command to establish a trust with the master domain (note that this command should appear on a single line):

    NETDOM /Domain:MYRESOURCEDOM MASTER MYMASTERDOM <trust password> /TRUST
NETDOM can also build a trust relationship and complete the operationsabove all at once. If you have an administrator access to the resourcedomain, both of the following commands builds the trust relationshipin one step (note that these commands should each appear on a single line):

NETDOM MASTER MYMASTERDOM <trust password> /TRUST

-or-

(If you need to enter an administrator account for the resource domain)

NETDOM /Domain:MYRESOURCEDOM /User:MYRESOURCEDOM\<administrator user> /Password:<administrator password> MASTER MYMASTERDOM <trust password> /TRUST

You can run the second command above from the master domain primary domaincontroller (PDC) or from any Windows NT computer as soon as you have anadministrator access to the master domain.

For more information on the NETDOM command, refer to the Windows NT 4.0Resource Kit documentation.
prodnt
Properties

Article ID: 175025 - Last Review: 11/01/2006 07:29:52 - Revision: 1.2

  • Microsoft Windows NT Server 4.0 Standard Edition
  • Microsoft Windows NT Workstation 4.0 Developer Edition
  • kbhowto KB175025
Feedback