Issue with Windows Authentication in IIS on site (Multiple Domains)

Question

We're receiving the error - The trust relationship between the primary domain and the trusted domain failed. - When using windows authentication in IIS on a specific site.

The domain that the server that hosts the site on (Domain A) is different then the domain the users are logging in from(Domain B). There is a one way trust in place that domain A trusts domain B. I initially thought maybe this was an NTFS permissions error so I tried to add a user to the NTFS permissions for the site with everything except modify and that didn't seem to alleviate the issue.

Answer 1

@Hipszky, Steve

The trust relationship between the primary domain and the trusted domain failed.

This error occurs due to multiple reasons, some of the reasons we’re a lot of common. the most common reason is the firewall, you can try to turn off the firewall and try again.

There is a one way trust in place that domain A trusts domain B.

Do you mean that A is the primary domain and B is the trusted domain, what you want to do is to fix the trust relationship between the primary domain and the trusted domain failed? if so, you can try the follow steps:

In the trust relationship between the primary domain and the trusted domain failed method, we will first verify whether the trust between the primary and the trusted domain. If the trust is broken, we will re-establish the trust. Follow the steps to see how it is done.

1. Open the Start Menu, here type cmd, now right-click on cmd and run as administrator.
2. In the command prompt window, enter this command: netdom trustTrustingDomainName**/d:TrustedDomainName/verify**.
   NOTE: In the above command TrustingDomainName points the DNS name of the domain that is being verified, while the TrustedDomainName points the DNS name of the trusted domain.
3. After executing the command, you will cam to know whether the trust exists or not.
4. In case the trust is breeches, follow the steps.
5. Open up the command window with administrator right.
6. Execute this command: netdom trustTrustingDomainName**/d:TrustedDomainName/add/realm/PasswordT:**NewRealmTrustPassword.
7. After executing the command, the trust between both the domain will be back.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.