Windows Forum

Ask something
Discussion Locked

Windows 2000 trust verification

0 helpful
2 replies

by trep

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a one way trust between my domain (domainB) and the corporate domain(domainA) where they trust us. I need to create an account in domainA for them to use to verify the trust but I can't give them a Domain Admin account.

Can anyone explain if/how to create an account that can be used by an administrator in a trusting domain to verify that the one way trust is configured/functioning correctly. The account needs to be a basic Domain User with delegated privelleges for Trust management or something similiar.

2 replies

by ross.bale

Since you need to give a user account which has priviledges for trusts, it would need to be a member of the Enterprise Administrators group which gives much higher privs than Domain Admins, for testing purposes, I personally would create an Admin account with a password, verify the trust and then delete the account - this ensures that there are sufficient privs to test, but no security issues.

This discussion is closed to new replies.