Removing Kerberos Trust relationships that will not remove.

[Guest]

On my WinXP machine using AD Domains & Trusts I have a incoming kerberos
non-transitive <Realm> trust to a domain that needs to be removed. If I try
to remove this trust using the GUI, I receive this AD error, "Windows cannot
obtain the trust information from domain "xxxx". Either the domain is
unavailable or its trust information no longer exists. If the trust
information does not exist, you should remove the trust. Do you want to
remove the trust?"
I select yes, but receive this error, "A Trusted-Domain object cannot be
found for the trust to domain "xxxx". The trust may have been removed be
another user." This is all fine and dandy, but the trust still remains
visually in AD Domains & Trusts. How can I remove this visually?
I have tried using netdom to remove it, but receive another error stating
that it cannot find the specified file. Need a little help.

 

[Guest]

Im not sure if you can using a GUI tool remove it. Try follow this link
http://support.microsoft.com/default.aspx?scid=kb;en-us;230306 . There is a
piece graphical and another one using NTDSUTIL (Metadata Cleanup)

 

[Guest]

I don't have any orphaned domains that need to be removed. The domain that
was trusted in the past does not belong to us and therefore have no control
of it. We simply had a trust to it. The trust is only visable with the GUI
on an XP machine using AD Domains & Trusts. The trust is not visable using
AD Domain & trusts from my DC's. We are natvie 2000.
I can also verify the trust using netdom, but I can not remove it and that
is where I need help!

 

[Guest]

The forest does not see any other domain besides its' own therefore there is
no orphaned domain to remove. I have verified this with netdom. Does
anybody have any thoughts on this?

 

[Guest]

I thougth there was suppose to be active responses from Microsoft technicians
to help me out with issues like this one. Does anyone have an idea?

 

[Jorge_de_Almeida_Pinto]

I thougth there was suppose to be active responses from
Microsoft technicians
to help me out with issues like this one. Does anyone have an
idea?


help.

Try using ADSIEDIT. Connect to the domain naming context goto the
system container and see if you can find an object with the name of
the realm and that has a class called trustedDomain