Deleting automatically created trusts

I am not able to delete automatically created trusts. So my question is; are you able to delete those, or are the trusts that are automatically created between domains in a forest/tree, not deleteable?

I'm running 2008 R2, FFL is R2, and DFL is also R2. I open up AD Domains and Trusts, right click a domain, choose properties, and go to the Trusts tab. Then I choose a trust that has automatically been created, and the "remove" button is greyed out. It doesn't matter which credentials I am using (enterprise/domain admins).

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

Asif Dasl

Probably can't delete them. Never tried to be honest. It would make sense seen as they are transitive trusts made on creation of the child domains.

Dracula28

Asif Dasl wrote: »

Probably can't delete them. Never tried to be honest. It would make sense seen as they are transitive trusts made on creation of the child domains.

Thanks for the answer Asif. Do you have pakistani background?

The trusts that are created automatically, such as the child to parent domain trust, and Tree root trusts, are trusts you can not delete. Say you have two trees:

Contoso.com (forest root domain) and treyresearch.net, and both the root domains have a child domain each, west.contoso.com, and east.treyresearch.net

On Treyresearch.net you will have trusts for contoso.com and east.treyresearch.net, but there will not be an explicit trust for west.contoso.com. That trust is implied only, as the trust between east.treyresearch.net and contoso.com is transitive.

Reading the mspress book, technet and labbing a lot, I've gotten a farily good understanding of this subject.

Asif Dasl

Dracula28 wrote: »

Thanks for the answer Asif. Do you have pakistani background?

No it's just my pseudonym, I'm 100% Irish. I just use it with software trials and such, that's why I use it here. Good luck with your studies.