AnswerBun.com

Is SID Filtering Enabled?

Server Fault Asked on December 23, 2020

I ran nltest /domain_trusts and received the following output:

List of domain trusts:
    ...
    1: TESTLAB TESTLAB.COM (NT 5) (Direct Outbound) ( Attr: 0x8 )

I don’t understand the attribute field. From this output can you tell if this is an external trust, and if SID filtering is enabled?

Thanks!

One Answer

SID Filtering (quarantine) would have the 0x4 flag set.

If you want a plain english output, use the following command:

netdom trust somedomain.com /domain:anotherdomain.com /quarantine
SID filtering is not enabled for this trust. All SIDs presented in an
authentication request from this domain will be honored.

[MS-ADTS]: Active Directory Technical Specification
https://msdn.microsoft.com/en-us/library/cc223122.aspx

Answered by Greg Askew on December 23, 2020

Add your own answers!

Related Questions

Curl: disable certificate verification

3  Asked on December 1, 2021

   

Server shutdown in progress for hours

1  Asked on December 1, 2021

 

FreeRadius doesn’t log request in Debug mode

1  Asked on December 1, 2021 by matthias-wimmer

   

What’s the Busybox default shell?

2  Asked on November 29, 2021 by vivekian2

     

Templating with Linux in a Shell Script?

13  Asked on November 29, 2021

   

Ask a Question

Get help from others!

© 2022 AnswerBun.com. All rights reserved. Sites we Love: PCI Database, MenuIva, UKBizDB, Menu Kuliner, Sharing RPP