Editing: NLTEST to test the trust relationship between a workstation and domain

Title
<html> <body> [TOC]<br> <b><br> <h6><a name="NLTEST_can_be_used_to_show_this_trust_relationship"></a>1.NLTEST can be used to show this trust relationship.</h6> <p> </p> <div class="reCodeBlock"> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)">PS C:\> nltest /trusted_domains</code></span></div> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)">List of domain trusts:</code></span></div> <div style="background-color:rgb(255,255,255)"><span><code>    </code><span style="margin-left:12px!important"><code style="color:rgb(0,0,0)">0: GS gs.com (NT 5) (Direct Outbound) (Direct Inbound) ( Attr: 0x8 )</code></span></span></div> <div style="background-color:rgb(248,248,248)"><span><code>    </code><span style="margin-left:12px!important"><code style="color:rgb(0,0,0)">1: CONTOSO contoso.com (NT 5) (Forest Tree Root) (Primary Domain) (Native)</code></span></span></div> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)">The command completed successfully</code></span></div> </div> </b> <div class="reCodeBlock"> <div style="background-color:rgb(255,255,255)"><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)"></code></span> </div> </div> <h6><a name="To_determine_the_domain_controllers_in_the_CONTOSO_domain"></a>2.To determine the domain controllers in the CONTOSO domain:</h6> <div class="reCodeBlock"> <div style="background-color:rgb(255,255,255)"> <div class="reCodeBlock"> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>PS C:\> nltest /dclist:contoso</strong></code></span></div> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Get list of DCs in domain 'contoso' from '\\WIN-5Q4IM0060DO'.</strong></code></span></div> <div style="background-color:rgb(255,255,255)"><span><strong><code>    </code><span style="margin-left:12px!important"><code style="color:rgb(0,0,0)">WIN-5Q4IM0060DO.contoso.com [PDC]  [DS] Site: IND-BLR</code></span></strong></span></div> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>The command completed successfully</strong></code></span></div> </div> </div> </div> <b> <h6><a name="To_determine_the_domain_controllers_in_the_MICROSOFT_domain"></a>3.To determine the domain controllers in the CONTOSO domain:</h6> </b> <h6><a name="PS_C_gt_nltest_dclist_contoso_Get_list_of_DCs_in_domain_contoso_from_WIN-5Q4IM0060DO_WIN-5Q4IM0060DO_contoso_com_PDC_DS_Site_IND-BLR_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_dclist_contoso_Get_list_of_DCs_in_domain_contoso_from_WIN-5Q4IM0060DO_WIN-5Q4IM0060DO_contoso_com_PDC_DS_Site_IND-BLR_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_dclist_contoso_Get_list_of_DCs_in_domain_contoso_from_WIN-5Q4IM0060DO_WIN-5Q4IM0060DO_contoso_com_PDC_DS_Site_IND-BLR_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_dclist_contoso_Get_list_of_DCs_in_domain_contoso_from_WIN-5Q4IM0060DO_WIN-5Q4IM0060DO_contoso_com_PDC_DS_Site_IND-BLR_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_dclist_contoso_Get_list_of_DCs_in_domain_contoso_from_WIN-5Q4IM0060DO_WIN-5Q4IM0060DO_contoso_com_PDC_DS_Site_IND-BLR_The_command_completed_successfully"></a><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"> <div class="reCodeBlock"> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>PS C:\> nltest /dclist:contoso</strong></code></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Get list of DCs in domain 'contoso' from '\\WIN-5Q4IM0060DO'.</strong></code></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span><strong><code>    </code><span style="margin-left:12px!important"><code style="color:rgb(0,0,0)">WIN-5Q4IM0060DO.contoso.com [PDC]  [DS] Site: IND-BLR</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>The command completed successfully</strong></code></span></div> </div> </code></span></h6> <b> <h6><a name="Below_are_the_secure_channels_between_each_domain_controller_in_CONTOSO_and_a_DC_in_the_MICROSOFT_domain"></a>4.Below are the secure channels between each domain controller in CONTOSO and a DC in the MICROSOFT domain.</h6> </b> <div class="reCodeBlock"> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>C:\>nltest /server:test1 /sc_query:microsoft</strong></code></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">Flags: 0</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">Connection Status = 0 0x0 NERR_Succmicrosoft</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">Trusted DC Name \\NET1</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">Trusted DC Connection Status Status = 0 0x0 NERR_Succmicrosoft</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">The command completed succmicrosoftfully</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><strong> </strong></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">C:\>nltest /server:test2 /sc_query:microsoft</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">Flags: 0</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">Connection Status = 0 0x0 NERR_Succmicrosoft</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">Trusted DC Name \\NET1</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">Trusted DC Connection Status Status = 0 0x0 NERR_Succmicrosoft</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">The command completed succmicrosoftfully</code></span></strong></span></div> </div> <b> <h6><a name="The_workstation_that_is_a_member_of_the_CONTOSO_domain_has_an_implicit_trust_with_a_domain_controller"></a>5.The workstation that is a member of the CONTOSO domain has an implicit trust with a domain controller.</h6> </b> <div class="reCodeBlock"> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>C:\>nltest /server:Computer1 /sc_query:contoso</strong></code></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Flags: 0</strong></code></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Connection Status = 0 0x0 NERR_Succmicrosoft</strong></code></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Trusted DC Name \\TEST2</strong></code></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Trusted DC Connection Status Status = 0 0x0 NERR_Succmicrosoft</strong></code></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>The command completed succmicrosoftfully</strong></code></span></div> </div> <p style="margin:0cm 0cm 10pt"> </p> <b> <h6><a name="To_determine_if_a_domain_controller_can_authenticate_a_user_account"></a>6.To determine if a domain controller can authenticate a user account:</h6> </b><code style="color:rgb(0,0,0)"> <p style="margin:0cm 0cm 10pt"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>PS C:\> nltest /whowill:contoso biz<br> </strong></code></span><strong><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)">[11:06:22] Mail message 0 sent successfully (\MAILSLOT\NET\GETDC834)<br> </code></span><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)">[11:06:22] Response 0: NetpDcAllocateCacheEntry: new entry 0x000000D83F9ADBD0 -> DC:WIN-5Q4IM0060DO DnsDomName:(null) Flags:0x0</code></span></strong></p> <strong></strong> <div class="reCodeBlock"><strong></strong> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>S:WIN-5Q4IM0060DO D:CONTOSO A:biz (Act found)</strong></code></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>The command completed successfully</strong></code></span> </div> </div> <p style="margin:0cm 0cm 10pt"><a href="http://social.technet.microsoft.com/wiki/cfs-file.ashx/__key/communityserver-wikis-components-files/00-00-00-00-05/3021.123.png"><img alt="" src="http://social.technet.microsoft.com/wiki/resized-image.ashx/__size/550x0/__key/communityserver-wikis-components-files/00-00-00-00-05/3021.123.png" width="551" height="53" style="border-width:0px; border-style:solid; width:649px; height:91px"></a></p> </code> <h6><a name="NLTEST_can_be_used_to_find_a_trusted_domain_that_has_a_given_user_account"></a></h6> <b> <h6><a name="NLTEST_can_be_used_to_find_a_trusted_domain_that_has_a_given_user_account"></a><span><br> 7.NLTEST can be used to find a trusted domain that has a given user account.<br> </span></h6> </b><br> <a href="http://social.technet.microsoft.com/wiki/cfs-file.ashx/__key/communityserver-wikis-components-files/00-00-00-00-05/4786.123.png"><img alt="" src="http://social.technet.microsoft.com/wiki/resized-image.ashx/__size/550x0/__key/communityserver-wikis-components-files/00-00-00-00-05/4786.123.png" width="548" height="201" style="border-width:0px; border-style:solid; width:323px; height:115px"></a> <h6><a name="Determine_SRV_priorities_and_weights_Command_for_trusting_and_trusted_domain"></a>8.Determine SRV priorities and weights (Command for trusting and trusted domain)</h6> <div class="reCodeBlock"></div> <div class="reCodeBlock" style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><strong><code style="color:rgb(0,0,0)">PS C:\> nltest /dnsgetdc:contoso</code><code style="color:rgb(0,153,0)">.</code><code style="color:rgb(0,0,0)">com</code></strong></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><strong><code style="color:rgb(0,0,0)">List </code><code style="color:rgb(0,102,153); font-weight:bold">of</code> <code style="color:rgb(0,0,0)"> DCs </code><code style="color:rgb(0,102,153); font-weight:bold">in</code> <code style="color:rgb(0,0,0)"> pseudo-random order taking into account SRV priorities </code><code style="color:rgb(0,102,153); font-weight:bold">and</code> <code style="color:rgb(0,0,0)">weights:</code></strong></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Non-Site specific:</strong></code></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(248,248,248)"><span><strong><code>   </code><span style="margin-left:9px!important"><code style="color:rgb(0,0,0)">win-5q4im0060do</code><code style="color:rgb(0,153,0)">.</code><code style="color:rgb(0,0,0)">contoso</code><code style="color:rgb(0,153,0)">.</code><code style="color:rgb(0,0,0)">com  fe80::e0a8:9c56:ba17:df5d%</code><code style="color:rgb(0,153,0)">12</code>  <code style="color:rgb(0,153,0)"> 10.224.34.1</code></span></strong></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>The command completed successfully</strong></code></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><strong><code style="color:rgb(0,0,0)">PS C:\> nltest /dnsgetdc:gs</code><code style="color:rgb(0,153,0)">.</code><code style="color:rgb(0,0,0)">com</code></strong></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><strong><code style="color:rgb(0,0,0)">List </code><code style="color:rgb(0,102,153); font-weight:bold">of</code> <code style="color:rgb(0,0,0)"> DCs </code><code style="color:rgb(0,102,153); font-weight:bold">in</code> <code style="color:rgb(0,0,0)"> pseudo-random order taking into account SRV priorities </code><code style="color:rgb(0,102,153); font-weight:bold">and</code> <code style="color:rgb(0,0,0)">weights:</code></strong></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Non-Site specific:</strong></code></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(255,255,255)"><span><strong><code>   </code><span style="margin-left:9px!important"><code style="color:rgb(0,0,0)">ban-dc01</code><code style="color:rgb(0,153,0)">.</code><code style="color:rgb(0,0,0)">gs</code><code style="color:rgb(0,153,0)">.</code><code style="color:rgb(0,0,0)">com  </code><code style="color:rgb(0,153,0)">10.224.34.10</code></span></strong></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>The command completed successfully</strong></code></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(255,255,255)"><code style="color:rgb(0,0,0)"><strong>PS C:\></strong><br> <h6><a name="Determine_the_failures_for_all_DC-specific_DNS_records"></a>9.Determine the failures for all DC-specific DNS records</h6> <h6><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a> <div class="reCodeBlock"> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>PS C:\> nltest /DSQUERYDNS</strong></code></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Flags: 0</strong></code></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Connection Status = 0 0x0 NERR_Success</strong></code></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>There was no failure in the last update for all DC-specific DNS records</strong></code></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>The command completed successfully</strong></code></span></div> </div> </h6> </code> <h6><a name="Reset_the_NETLON_secure_channel"></a>10.Reset the NETLON secure channel</h6> </div> <p><strong><code style="color:rgb(0,0,0)">nltest /sc_reset:<</code><code style="color:rgb(0,102,153); font-weight:bold">domainname</code><code style="color:rgb(0,0,0)">></code></strong></p> <div class="reCodeBlock" style="background-color:rgb(255,255,255)"> <h6> </h6> </div> <div class="reCodeBlock"></div> <p style="margin:0cm 0cm 10pt"> </p> <p style="margin:0cm 0cm 10pt"><span style="color:rgb(34,34,34)"><br> <span style="font-family:Calibri"></span></span></p> </body> </html>
Comment
Tags
Please add 8 and 6 and type the answer here:

Products

Resources

Solutions

Updates

Trials

Related Sites

Training

Certifications

Other resources

Support options

More support

Not an IT pro?