Is SID Filtering Enabled?

Server Fault Asked on December 23, 2020

I ran nltest /domain_trusts and received the following output:

List of domain trusts:
    ...
    1: TESTLAB TESTLAB.COM (NT 5) (Direct Outbound) ( Attr: 0x8 )

I don’t understand the attribute field. From this output can you tell if this is an external trust, and if SID filtering is enabled?

Thanks!

active directory trust relationship

One Answer

SID Filtering (quarantine) would have the 0x4 flag set.

If you want a plain english output, use the following command:

netdom trust somedomain.com /domain:anotherdomain.com /quarantine
SID filtering is not enabled for this trust. All SIDs presented in an
authentication request from this domain will be honored.

[MS-ADTS]: Active Directory Technical Specification
https://msdn.microsoft.com/en-us/library/cc223122.aspx

Answered by Greg Askew on December 23, 2020

Is SID Filtering Enabled?

One Answer

Add your own answers!

Related Questions

Benefits of EC2 Dedicated Instances for latency (within the same AZ)

OpenSSH HostBasedAuthentication failing: get_socket_address: getnameinfo 8 failed: Name or service not known when ssh_keysign runs

Explaining svn / apache permissions error? (I know “how” but not “why”)

Curl: disable certificate verification

Subject Alternative Name not added to certificate

Enabling PDO for CLI in vagrant box precise64 (Ubuntu server 12.04 LTS)

Is it possible to on-line shrink a EXT4 volume with LVM?

Apache as a Reverse Proxy in combination with Alias

How to use setfacl on ZFS dataset to set the equivalent of UNIX-style chmod 770?

Odoo 10 CE performance tuning – enabling workers

ERROR: (gcloud.auth.activate-service-account) Could not read json file /root/gcloud-service-key.json: No JSON object could be decoded

Server shutdown in progress for hours

How to syncronize XML files and store them as .gz at destination using rsync

Esxi 5.1 Core Dump followed by poor performance on Server 2012 VM; OK after disconnecting external iSCSI datastores

FreeRadius doesn’t log request in Debug mode

Boot warning “No packages marked for update” Centos 7

What’s the Busybox default shell?

Templating with Linux in a Shell Script?

Change the order that an IPTABLE CHAIN is read (Using Fail2Ban)

How to group inferred instances when computing sustained use discounts

Ask a Question