Questions tagged as ['trust-relationship']
We have an AD identity forest with a one-way incoming transitive forest trust from a resource forest. Name suffix routing is enabled.
Users in the identity forest root domain can RDP to hosts joined to the resource forest
however,
Users in the identity forest child domain cannot RDP to a host in the resource forest - they get an error message "The security database on the server does not have a compute ...
Layout
Forest A | Forest B | |
---|---|---|
Forest | ForestA |
ForestB |
Domain | DomainA |
DomainB |
Computers | ComputerA1 , ComputerA2 |
(none) |
User | UserA |
UserB |
Administration
ForestA
trustsForestB
ForestB
trustsForestA
UserA
is an administrator ofComputerA1
andComputerA2
UserB
is an administrator ofComputerA1
andComputerA2
Moving VMs with Hyper-V
I have Hyper-V running on ComputerA1
and ComputerA2
. I have Hy ...
While logged into HOST1
, my user can successfully run this powershell command to move a running VM from HOST1
to HOST2
:
Move-VM -Name DC02 -DestinationHost HOST2 -IncludeStorage -DestinationStoragePath "V:\Virtual Machines\DC02"
However, this command (which does the same thing because HOST1
is localhost
) fails:
Invoke-Command {
Move-VM -Name DC02 -DstinationHost HOST2 -IncludeStorage -DestinationSto ...

I have a set of several offices joined using various combinations of IPsec VPNs and an MPLS network. The majority of sites form a mesh arrangement using the VPNs, but site B only has a single IPsec VPN to site A - site B cannot reach any of the other sites (sites C, and D).
Sites A, C, and D all share an Active Directory domain, say "companya.com". Domain controllers for companya.com are located ...
I have two AD in which two-way trusts relationship(forest and transitive) exists. Trusted domain are trust1.com and trust2.com.
I created a AD-User(TEST1) in trust2.com using administrator credentials of trusted domain (trust1.com). But I am not able to rename the computer username from TEST1 to TEST2 using administrator credentials of trust1.com.
I can see ldap_rename is giving the error insuffici ...
Setup
All computers running Windows Server 2019.
Domain A
Item | Value | Fully Qualified |
---|---|---|
Domain Name | DomainA |
DomainA.local |
User | UserA |
UserA@DomainA.local |
Server | FileServer |
FileServer.DomainA.local |
Domain B
Item | Value | Fully Qualified |
---|---|---|
Domain Name | DomainB |
DomainB.local |
User | UserB |
UserB@DomainB.local |
Server | FileServer |
FileServer.DomainB.local |
Worksation | WorkStation |
WorkStation.D ... |
Overview
We log into Gucamole with a User from DomainA where we select a rdp-connection to a server from DomainB.
Trusts
DomainA to DomainB and vice versa:
- Type: External
- Kerberos AES Encryption support: no
- Direction: two-way
- Transitivity: no
- Authentication: Domain-wide
Permissions
User from DomainA has been joined to the local Remote Desktop Users group on the Server from DomainB. Have temporarily al ...