Recreate trust relationship between two domain

Question

Hi

We have two domains with a twoway trust. Domain A and Domain B.

The trust relationship was setup in 2003 when domain suffix routing was not supported. Since then the DC and domain have been update to 2016 and 2012.

We would now like to be able to authenticate in Domain A from Domain B using a domain Suffix in Domain B. EG username@mathieu.company .com

To do this we need to destroy the current trusted relationship and rebuild a new trust which will support domain suffix routing. I have tested this in UAT and it all worked without issue.

What we are worried about is this creating an issue where existing configuration is lost. EG: Domain B Security Group configured in Domain A stop working as SID have changed? Any other possible problems this might cause.

if anyone out there has rebuild a trust between two domain can you let me know if you had any problem? If anyone else has any information it would be appreciated.

Regards
Craig G

Answer 1

Hi,

When you rebuild new trust relationship between two domain the authentication cross domain will be broken during the rebuilt.
Once the trust is rebuilt, the authentication cross forest and domain will be restored.

What we are worried about is this creating an issue where existing configuration is lost. EG: Domain B Security Group configured in Domain A stop working as SID have changed? Any other possible problems this might cause

The SID still the same. When you remove the trust , you will see the SID of Domain B Security group in domain A instead of its name. Because there is no suffix name resolution through trust . it's a normal behavior when the trust is deleted.

Please don't forget to mark helpful reply as answer