TechNet
Products
IT Resources
Downloads
Training
Support
Products
Windows
Windows Server
System Center
Microsoft Edge
Office
Office 365
Exchange Server
SQL Server
SharePoint Products
Skype for Business
See all products »
Resources
Channel 9 Video
Evaluation Center
Learning Resources
Microsoft Tech Companion App
Microsoft Technical Communities
Microsoft Virtual Academy
Script Center
Server and Tools Blogs
TechNet Blogs
TechNet Flash Newsletter
TechNet Gallery
TechNet Library
TechNet Magazine
TechNet Wiki
Windows Sysinternals
Virtual Labs
Solutions
Networking
Cloud and Datacenter
Security
Virtualization
Updates
Service Packs
Security Bulletins
Windows Update
Trials
Windows Server 2016
System Center 2016
Windows 10 Enterprise
SQL Server 2016
See all trials »
Related Sites
Microsoft Download Center
Microsoft Evaluation Center
Drivers
Windows Sysinternals
TechNet Gallery
Training
Expert-led, virtual classes
Training Catalog
Class Locator
Microsoft Virtual Academy
Free Windows Server 2012 courses
Free Windows 8 courses
SQL Server training
Microsoft Official Courses On-Demand
Certifications
Certification overview
Special offers
MCSE Cloud Platform and Infrastructure
MCSE: Mobility
MCSE: Data Management and Analytics
MCSE Productivity
Other resources
Microsoft Events
Exam Replay
Born To Learn blog
Find technical communities in your area
Azure training
Official Practice Tests
Support options
For business
For developers
For IT professionals
For technical support
Support offerings
More support
Microsoft Premier Online
TechNet Forums
MSDN Forums
Security Bulletins & Advisories
Not an IT pro?
Microsoft Customer Support
Microsoft Community Forums
Sign in
Home
Library
Wiki
Learn
Gallery
Downloads
Support
Forums
Blogs
Resources For IT Professionals
United States (English)
Россия (Pусский)
中国（简体中文）
Brasil (Português)
Skip to locale bar
Editing: NLTEST to test the trust relationship between a workstation and domain
Wiki
>
TechNet Articles
>
NLTEST to test the trust relationship between a workstation and domain
Article
History
Title
<html> <body> [TOC]<br> <b><br> <h6><a name="NLTEST_can_be_used_to_show_this_trust_relationship"></a>1.NLTEST can be used to show this trust relationship.</h6> <p> </p> <div class="reCodeBlock"> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)">PS C:\> nltest /trusted_domains</code></span></div> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)">List of domain trusts:</code></span></div> <div style="background-color:rgb(255,255,255)"><span><code> </code><span style="margin-left:12px!important"><code style="color:rgb(0,0,0)">0: GS gs.com (NT 5) (Direct Outbound) (Direct Inbound) ( Attr: 0x8 )</code></span></span></div> <div style="background-color:rgb(248,248,248)"><span><code> </code><span style="margin-left:12px!important"><code style="color:rgb(0,0,0)">1: CONTOSO contoso.com (NT 5) (Forest Tree Root) (Primary Domain) (Native)</code></span></span></div> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)">The command completed successfully</code></span></div> </div> </b> <div class="reCodeBlock"> <div style="background-color:rgb(255,255,255)"><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)"></code></span> </div> </div> <h6><a name="To_determine_the_domain_controllers_in_the_CONTOSO_domain"></a>2.To determine the domain controllers in the CONTOSO domain:</h6> <div class="reCodeBlock"> <div style="background-color:rgb(255,255,255)"> <div class="reCodeBlock"> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>PS C:\> nltest /dclist:contoso</strong></code></span></div> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Get list of DCs in domain 'contoso' from '\\WIN-5Q4IM0060DO'.</strong></code></span></div> <div style="background-color:rgb(255,255,255)"><span><strong><code> </code><span style="margin-left:12px!important"><code style="color:rgb(0,0,0)">WIN-5Q4IM0060DO.contoso.com [PDC] [DS] Site: IND-BLR</code></span></strong></span></div> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>The command completed successfully</strong></code></span></div> </div> </div> </div> <b> <h6><a name="To_determine_the_domain_controllers_in_the_MICROSOFT_domain"></a>3.To determine the domain controllers in the CONTOSO domain:</h6> </b> <h6><a name="PS_C_gt_nltest_dclist_contoso_Get_list_of_DCs_in_domain_contoso_from_WIN-5Q4IM0060DO_WIN-5Q4IM0060DO_contoso_com_PDC_DS_Site_IND-BLR_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_dclist_contoso_Get_list_of_DCs_in_domain_contoso_from_WIN-5Q4IM0060DO_WIN-5Q4IM0060DO_contoso_com_PDC_DS_Site_IND-BLR_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_dclist_contoso_Get_list_of_DCs_in_domain_contoso_from_WIN-5Q4IM0060DO_WIN-5Q4IM0060DO_contoso_com_PDC_DS_Site_IND-BLR_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_dclist_contoso_Get_list_of_DCs_in_domain_contoso_from_WIN-5Q4IM0060DO_WIN-5Q4IM0060DO_contoso_com_PDC_DS_Site_IND-BLR_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_dclist_contoso_Get_list_of_DCs_in_domain_contoso_from_WIN-5Q4IM0060DO_WIN-5Q4IM0060DO_contoso_com_PDC_DS_Site_IND-BLR_The_command_completed_successfully"></a><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"> <div class="reCodeBlock"> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>PS C:\> nltest /dclist:contoso</strong></code></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Get list of DCs in domain 'contoso' from '\\WIN-5Q4IM0060DO'.</strong></code></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span><strong><code> </code><span style="margin-left:12px!important"><code style="color:rgb(0,0,0)">WIN-5Q4IM0060DO.contoso.com [PDC] [DS] Site: IND-BLR</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>The command completed successfully</strong></code></span></div> </div> </code></span></h6> <b> <h6><a name="Below_are_the_secure_channels_between_each_domain_controller_in_CONTOSO_and_a_DC_in_the_MICROSOFT_domain"></a>4.Below are the secure channels between each domain controller in CONTOSO and a DC in the MICROSOFT domain.</h6> </b> <div class="reCodeBlock"> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>C:\>nltest /server:test1 /sc_query:microsoft</strong></code></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">Flags: 0</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">Connection Status = 0 0x0 NERR_Succmicrosoft</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">Trusted DC Name \\NET1</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">Trusted DC Connection Status Status = 0 0x0 NERR_Succmicrosoft</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">The command completed succmicrosoftfully</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><strong> </strong></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">C:\>nltest /server:test2 /sc_query:microsoft</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">Flags: 0</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">Connection Status = 0 0x0 NERR_Succmicrosoft</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">Trusted DC Name \\NET1</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">Trusted DC Connection Status Status = 0 0x0 NERR_Succmicrosoft</code></span></strong></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span><strong><code> </code><span style="margin-left:3px!important"><code style="color:rgb(0,0,0)">The command completed succmicrosoftfully</code></span></strong></span></div> </div> <b> <h6><a name="The_workstation_that_is_a_member_of_the_CONTOSO_domain_has_an_implicit_trust_with_a_domain_controller"></a>5.The workstation that is a member of the CONTOSO domain has an implicit trust with a domain controller.</h6> </b> <div class="reCodeBlock"> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>C:\>nltest /server:Computer1 /sc_query:contoso</strong></code></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Flags: 0</strong></code></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Connection Status = 0 0x0 NERR_Succmicrosoft</strong></code></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Trusted DC Name \\TEST2</strong></code></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Trusted DC Connection Status Status = 0 0x0 NERR_Succmicrosoft</strong></code></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>The command completed succmicrosoftfully</strong></code></span></div> </div> <p style="margin:0cm 0cm 10pt"> </p> <b> <h6><a name="To_determine_if_a_domain_controller_can_authenticate_a_user_account"></a>6.To determine if a domain controller can authenticate a user account:</h6> </b><code style="color:rgb(0,0,0)"> <p style="margin:0cm 0cm 10pt"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>PS C:\> nltest /whowill:contoso biz<br> </strong></code></span><strong><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)">[11:06:22] Mail message 0 sent successfully (\MAILSLOT\NET\GETDC834)<br> </code></span><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)">[11:06:22] Response 0: NetpDcAllocateCacheEntry: new entry 0x000000D83F9ADBD0 -> DC:WIN-5Q4IM0060DO DnsDomName:(null) Flags:0x0</code></span></strong></p> <strong></strong> <div class="reCodeBlock"><strong></strong> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>S:WIN-5Q4IM0060DO D:CONTOSO A:biz (Act found)</strong></code></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>The command completed successfully</strong></code></span> </div> </div> <p style="margin:0cm 0cm 10pt"><a href="http://social.technet.microsoft.com/wiki/cfs-file.ashx/__key/communityserver-wikis-components-files/00-00-00-00-05/3021.123.png"><img alt="" src="http://social.technet.microsoft.com/wiki/resized-image.ashx/__size/550x0/__key/communityserver-wikis-components-files/00-00-00-00-05/3021.123.png" width="551" height="53" style="border-width:0px; border-style:solid; width:649px; height:91px"></a></p> </code> <h6><a name="NLTEST_can_be_used_to_find_a_trusted_domain_that_has_a_given_user_account"></a></h6> <b> <h6><a name="NLTEST_can_be_used_to_find_a_trusted_domain_that_has_a_given_user_account"></a><span><br> 7.NLTEST can be used to find a trusted domain that has a given user account.<br> </span></h6> </b><br> <a href="http://social.technet.microsoft.com/wiki/cfs-file.ashx/__key/communityserver-wikis-components-files/00-00-00-00-05/4786.123.png"><img alt="" src="http://social.technet.microsoft.com/wiki/resized-image.ashx/__size/550x0/__key/communityserver-wikis-components-files/00-00-00-00-05/4786.123.png" width="548" height="201" style="border-width:0px; border-style:solid; width:323px; height:115px"></a> <h6><a name="Determine_SRV_priorities_and_weights_Command_for_trusting_and_trusted_domain"></a>8.Determine SRV priorities and weights (Command for trusting and trusted domain)</h6> <div class="reCodeBlock"></div> <div class="reCodeBlock" style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><strong><code style="color:rgb(0,0,0)">PS C:\> nltest /dnsgetdc:contoso</code><code style="color:rgb(0,153,0)">.</code><code style="color:rgb(0,0,0)">com</code></strong></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><strong><code style="color:rgb(0,0,0)">List </code><code style="color:rgb(0,102,153); font-weight:bold">of</code> <code style="color:rgb(0,0,0)"> DCs </code><code style="color:rgb(0,102,153); font-weight:bold">in</code> <code style="color:rgb(0,0,0)"> pseudo-random order taking into account SRV priorities </code><code style="color:rgb(0,102,153); font-weight:bold">and</code> <code style="color:rgb(0,0,0)">weights:</code></strong></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Non-Site specific:</strong></code></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(248,248,248)"><span><strong><code> </code><span style="margin-left:9px!important"><code style="color:rgb(0,0,0)">win-5q4im0060do</code><code style="color:rgb(0,153,0)">.</code><code style="color:rgb(0,0,0)">contoso</code><code style="color:rgb(0,153,0)">.</code><code style="color:rgb(0,0,0)">com fe80::e0a8:9c56:ba17:df5d%</code><code style="color:rgb(0,153,0)">12</code> <code style="color:rgb(0,153,0)"> 10.224.34.1</code></span></strong></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>The command completed successfully</strong></code></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><strong><code style="color:rgb(0,0,0)">PS C:\> nltest /dnsgetdc:gs</code><code style="color:rgb(0,153,0)">.</code><code style="color:rgb(0,0,0)">com</code></strong></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><strong><code style="color:rgb(0,0,0)">List </code><code style="color:rgb(0,102,153); font-weight:bold">of</code> <code style="color:rgb(0,0,0)"> DCs </code><code style="color:rgb(0,102,153); font-weight:bold">in</code> <code style="color:rgb(0,0,0)"> pseudo-random order taking into account SRV priorities </code><code style="color:rgb(0,102,153); font-weight:bold">and</code> <code style="color:rgb(0,0,0)">weights:</code></strong></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Non-Site specific:</strong></code></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(255,255,255)"><span><strong><code> </code><span style="margin-left:9px!important"><code style="color:rgb(0,0,0)">ban-dc01</code><code style="color:rgb(0,153,0)">.</code><code style="color:rgb(0,0,0)">gs</code><code style="color:rgb(0,153,0)">.</code><code style="color:rgb(0,0,0)">com </code><code style="color:rgb(0,153,0)">10.224.34.10</code></span></strong></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>The command completed successfully</strong></code></span></div> <div class="reCodeBlock"><strong></strong></div> <div class="reCodeBlock" style="background-color:rgb(255,255,255)"><code style="color:rgb(0,0,0)"><strong>PS C:\></strong><br> <h6><a name="Determine_the_failures_for_all_DC-specific_DNS_records"></a>9.Determine the failures for all DC-specific DNS records</h6> <h6><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a><a name="PS_C_gt_nltest_DSQUERYDNS_Flags_0_Connection_Status_0_0x0_NERR_Success_There_was_no_failure_in_the_last_update_for_all_DC-specific_DNS_records_The_command_completed_successfully"></a> <div class="reCodeBlock"> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>PS C:\> nltest /DSQUERYDNS</strong></code></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Flags: 0</strong></code></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>Connection Status = 0 0x0 NERR_Success</strong></code></span></div> <strong></strong> <div style="background-color:rgb(248,248,248)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>There was no failure in the last update for all DC-specific DNS records</strong></code></span></div> <strong></strong> <div style="background-color:rgb(255,255,255)"><span style="margin-left:0px!important"><code style="color:rgb(0,0,0)"><strong>The command completed successfully</strong></code></span></div> </div> </h6> </code> <h6><a name="Reset_the_NETLON_secure_channel"></a>10.Reset the NETLON secure channel</h6> </div> <p><strong><code style="color:rgb(0,0,0)">nltest /sc_reset:<</code><code style="color:rgb(0,102,153); font-weight:bold">domainname</code><code style="color:rgb(0,0,0)">></code></strong></p> <div class="reCodeBlock" style="background-color:rgb(255,255,255)"> <h6> </h6> </div> <div class="reCodeBlock"></div> <p style="margin:0cm 0cm 10pt"> </p> <p style="margin:0cm 0cm 10pt"><span style="color:rgb(34,34,34)"><br> <span style="font-family:Calibri"></span></span></p> </body> </html>
Comment
Tags
Please add 5 and 6 and type the answer here: