Removing Kerberos Trust relationships that will not remove.

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

On my WinXP machine using AD Domains & Trusts I have a incoming kerberos
non-transitive <Realm> trust to a domain that needs to be removed. If I try
to remove this trust using the GUI, I receive this AD error, "Windows cannot
obtain the trust information from domain "xxxx". Either the domain is
unavailable or its trust information no longer exists. If the trust
information does not exist, you should remove the trust. Do you want to
remove the trust?"
I select yes, but receive this error, "A Trusted-Domain object cannot be
found for the trust to domain "xxxx". The trust may have been removed be
another user." This is all fine and dandy, but the trust still remains
visually in AD Domains & Trusts. How can I remove this visually?
I have tried using netdom to remove it, but receive another error stating
that it cannot find the specified file. Need a little help.

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Im not sure if you can using a GUI tool remove it. Try follow this link
http://support.microsoft.com/default.aspx?scid=kb;en-us;230306 . There is a
piece graphical and another one using NTDSUTIL (Metadata Cleanup)
--
Danilo Bordini - MVP Windows Server - Directory Services



"Rockpet" wrote:

> On my WinXP machine using AD Domains & Trusts I have a incoming kerberos
> non-transitive <Realm> trust to a domain that needs to be removed. If I try
> to remove this trust using the GUI, I receive this AD error, "Windows cannot
> obtain the trust information from domain "xxxx". Either the domain is
> unavailable or its trust information no longer exists. If the trust
> information does not exist, you should remove the trust. Do you want to
> remove the trust?"
> I select yes, but receive this error, "A Trusted-Domain object cannot be
> found for the trust to domain "xxxx". The trust may have been removed be
> another user." This is all fine and dandy, but the trust still remains
> visually in AD Domains & Trusts. How can I remove this visually?
> I have tried using netdom to remove it, but receive another error stating
> that it cannot find the specified file. Need a little help.

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

I don't have any orphaned domains that need to be removed. The domain that
was trusted in the past does not belong to us and therefore have no control
of it. We simply had a trust to it. The trust is only visable with the GUI
on an XP machine using AD Domains & Trusts. The trust is not visable using
AD Domain & trusts from my DC's. We are natvie 2000.
I can also verify the trust using netdom, but I can not remove it and that
is where I need help!

"Danilo Bordini [MVP]" wrote:

> Im not sure if you can using a GUI tool remove it. Try follow this link
> http://support.microsoft.com/default.aspx?scid=kb;en-us;230306 . There is a
> piece graphical and another one using NTDSUTIL (Metadata Cleanup)
> --
> Danilo Bordini - MVP Windows Server - Directory Services
>
>
>
> "Rockpet" wrote:
>
> > On my WinXP machine using AD Domains & Trusts I have a incoming kerberos
> > non-transitive <Realm> trust to a domain that needs to be removed. If I try
> > to remove this trust using the GUI, I receive this AD error, "Windows cannot
> > obtain the trust information from domain "xxxx". Either the domain is
> > unavailable or its trust information no longer exists. If the trust
> > information does not exist, you should remove the trust. Do you want to
> > remove the trust?"
> > I select yes, but receive this error, "A Trusted-Domain object cannot be
> > found for the trust to domain "xxxx". The trust may have been removed be
> > another user." This is all fine and dandy, but the trust still remains
> > visually in AD Domains & Trusts. How can I remove this visually?
> > I have tried using netdom to remove it, but receive another error stating
> > that it cannot find the specified file. Need a little help.

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

The forest does not see any other domain besides its' own therefore there is
no orphaned domain to remove. I have verified this with netdom. Does
anybody have any thoughts on this?

"Danilo Bordini [MVP]" wrote:

> Im not sure if you can using a GUI tool remove it. Try follow this link
> http://support.microsoft.com/default.aspx?scid=kb;en-us;230306 . There is a
> piece graphical and another one using NTDSUTIL (Metadata Cleanup)
> --
> Danilo Bordini - MVP Windows Server - Directory Services
>
>
>
> "Rockpet" wrote:
>
> > On my WinXP machine using AD Domains & Trusts I have a incoming kerberos
> > non-transitive <Realm> trust to a domain that needs to be removed. If I try
> > to remove this trust using the GUI, I receive this AD error, "Windows cannot
> > obtain the trust information from domain "xxxx". Either the domain is
> > unavailable or its trust information no longer exists. If the trust
> > information does not exist, you should remove the trust. Do you want to
> > remove the trust?"
> > I select yes, but receive this error, "A Trusted-Domain object cannot be
> > found for the trust to domain "xxxx". The trust may have been removed be
> > another user." This is all fine and dandy, but the trust still remains
> > visually in AD Domains & Trusts. How can I remove this visually?
> > I have tried using netdom to remove it, but receive another error stating
> > that it cannot find the specified file. Need a little help.