breaking domain trust

[Tony]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

I've had 2 domains/AD in same subnet which they both trusted
each other. Now they are seperated in different switch and subnet.
There is a ISA server in between that allows us to connect to it
so we can do remote administration.

Since in AD trusts, I still have the domains listed in the trust. Can I
remove it safely? In my workstations login, I still see both domains
listed.
Or is there a ste-by-step for deleting a trust without breaking anything?

tia

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

If the trust is no longer needed -for access and sharing, etc. then it's
quite safe to simply remove it provided that each domain is a seperate
forest. If these domains are both members of the same forest, two-way
transitive trusts are a default that cannot be broken. Nor would you want
to -Kerberos, etc.

If this is an external trust, then there should be no issues with getting
rid of it. If you have any issues using the AD Trusts Snap-In, use netdom.

--

Paul Williams

http://www.msresource.net/
http://forums.msresource.net/

"Tony" <tony2k@nospam.com> wrote in message
news:eRAjRbs8EHA.3840@tk2msftngp13.phx.gbl...

I've had 2 domains/AD in same subnet which they both trusted
each other. Now they are seperated in different switch and subnet.
There is a ISA server in between that allows us to connect to it
so we can do remote administration.

Since in AD trusts, I still have the domains listed in the trust. Can I
remove it safely? In my workstations login, I still see both domains
listed.
Or is there a ste-by-step for deleting a trust without breaking anything?

tia