Domain Trusts

Posted on 2007-10-05
Last Modified: 2010-04-18
Do both PDC emulators have to see each other for a trust to work ? Why and is there a work around ?
Question by:atomicnetworks
    1 Comment
    LVL 30

    Accepted Solution

    The PDCe in the trusting domain (the domain with the resources in it, if it's only a one-way trust) needs to be accessible by any DC in the trusted domain (the domain with the people in it, again if it's only a one-way trust.)  If it's a two-way trust, you can see from this description that the PDCe in each domain needs to be accessible by any DC in the domain on the other side of the trust.  

    As for the why, it's an implementation detail described here:  Basically, the password for the trust object in AD is changed internally by AD every 7 days, and this change is initiated by the PDCe in the trusting domain.

    There is no workaround for this that I am aware of.

    Featured Post

    Live: Real-Time Solutions, Start Here

    Receive instant 1:1 support from technology experts, using our real-time conversation and whiteboard interface. Your first 5 minutes are always free.

    Join & Write a Comment

    I know all systems administrator at some time or another has had to create a script to copy file from a server share to a desktop. Well now there is an easy way to do this in Group Policy. Using Group policy preferences is not hard. The first thing …
    ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now