Microsoft KB Archive/817013

= You cannot create a new trust through the Domains and Trusts console when you are logged on locally to a domain controller =

Article ID: 817013

Article Last Modified on 2/28/2007

-

APPLIES TO


 * Microsoft Windows Server 2003, 64-Bit Datacenter Edition
 * Microsoft Windows Server 2003, Enterprise x64 Edition
 * Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Web Edition

-



SYMPTOMS
When you are logged on locally to a domain controller and you try to create a new trust by using the Domains and Trusts console, the operation may be unsuccessful, and you may receive an &quot;access denied&quot; error message.



CAUSE
This issue occurs only if you are logged on locally to the domain controller as an ordinary user (through an account other than Administrator). By default, ordinary users are blocked from logging on locally to a domain controller unless Group Policy is modified to permit this.



WORKAROUND
To work around this issue, use one of the following methods:
 * Use the Runas command with domain administrator credentials instead of entering credentials in the Domains and Trusts console.

-or-
 * Use the Runas command from another computer.

Note For more information about how to use Runas, see the &quot;Using Run as&quot; Windows 2003 Help Topic.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.

Keywords: kbbug KB817013

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.