1.       Domain Admin

2.       No

3.       No

4.       Recreate it or authoritatively restore the objects for the trust from 
backup

Thanks,
Brian Desmond
br...@briandesmond.com

w - 312.625.1438 | c   - 312.731.3132

From: Bill Monicher [mailto:bmacd5...@gmail.com]
Sent: Tuesday, November 08, 2011 2:50 PM
To: NT System Admin Issues
Subject: Implications of breaking a trust to a non-existent NT4 domain


Our AD functional level is W2000Native.
The DCs for the external trust are not available at the moment, and can't be 
without some work.  No computer accounts or user accounts from NT4 domain exist.

This is not a transitive trust, of course, but in Domains and Trusts, it shows 
that this domain trusted ours, and our domain trusted it.

Some questions:
1.  Does the user breaking such a trust from our end need to be an Enterprise 
Admin, or can a lowly domain admin do this successfully?
2.  Are there any implications in breaking this trust other than have it 
disappear from the list, and have the error log messages stop?
3.  Is there any advantage to digging out the backups and creating a DC for the 
NT4 domain and break the trust from that end first?
4.  What is the backout method?

Regards,
Brunton



~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Reply via email to