View Categories

Why is my Active Directory trust showing incorrect or outdated domain controller information?

< 1 min read

Why is my Active Directory trust showing incorrect or outdated domain controller information?


  1. Use the 'netdom query dc' command in the Windows CMD prompt to check the domain controllers.
  2. Check whether the domain controllers are using dynamic DNS registration with Kerberos authentication.
  3. Ensure the domain controllers are all up to date and have the same patch level.
  4. Check if any system time differences exist between the domain controllers.
  5. Compare the trust object’s SID and name attributes both in the Active Directory and Windows CMD to see if any discrepancies occur.
  6. Run the 'repadmin /showrepl' command to check for any replication errors.

Powered by BetterDocs