Trusts - TDO Object

Question

When creating a Active Directory Trust - I have the TDO object in the Systems container.

I am getting some pushback back from our Risk Management team on the objects in the Users container. I believe these are only used when creating the Trust and when the TDO is created, and validated and can be deleted.

Are the objects in the Users Container still needed? The reasoning is that these accounts have the Password Not Expired attribute not set. I cannot find any MS documentation if these User objects can be deleted since the TDO is active in the Systems container.

Any help is appreciated.

Answer 1

Hi,
 
Just checking in to see if the information provided was helpful. Please let us know if you would like further assistance.
 
Best Regards,
Vicky

Answer 2

>>Are the objects in the Users Container still needed?

According to my knowledge, does not affect deletion and change

Hope this information can help you

Best wishes
Vicky

Answer 3

Hi,

If the account has been used to create the trust , you can delete or modify it it if the trust is already created with no impact on trust and TDO object.

Please don't forget to mark this reply as answer if it help you to fix your issue