Event ID 22 — Active Directory Domain Services Trust Configuration
Applies To: Windows Server 2008 R2
Active Directory Domain Services (AD DS) trusts are used to establish trust relationships between different Kerberos realms so that Kerberos clients can access resources.
Event Details
Product: | Windows Operating System |
ID: | 22 |
Source: | Microsoft-Windows-Kerberos-Key-Distribution-Center |
Version: | 6.1 |
Symbolic Name: | KDCEVENT_TRUST_LOOP |
Message: | The KDC encountered a trust loop when building a list of trusted domains. This indicates that the route to the domain %1 from this KDC has more than one possible trust path. |
Resolve
Remove the duplicate trust
To perform these procedures, you must be a member of the Domain Admins group, or you must have been delegated the appropriate authority.
Note: The domain that has a duplicate trust associated with it is identified in the event log message.
To remove the duplicate trust by using Active Directory Domains and Trusts:
- Log on to a computer that has Active Directory Domains and Trusts installed. It is installed by default on a domain controller.
- Click Start, point to Administrative Tools, and then click Active Directory Domains and Trusts.
- In the console tree, right-click the domain that contains the trust that you want to remove, and then click Properties.
- Click the Trusts tab.
- Click the trust to be removed, and then click Remove.
- Click Yes to remove the trust from both the local domain and the other domain.
- Provide administrative credentials for the reciprocal domain, and then click OK.
Verify
To perform this procedure, you must be a member of the Domain Admins group, or you must have been delegated the appropriate authority.
To verify the trust relationship by using Active Directory Domains and Trusts:
- Log on to a computer that has Active Directory Domains and Trusts installed. It is installed by default on a domain controller.
- Click Start, point to Administrative Tools, and then click Active Directory Domains and Trusts.
- In the console tree, right-click the domain that contains the trust you want to verify, and then click Properties.
- On the Trusts tab, under either Domains trusted by this domain (outgoing trusts) or Domains that trust this domain (incoming trusts), click the trust to be verified, and then click Properties.
- Click Validate.
- Click Yes, validate the incoming trust, and then click OK.