Microsoft KB Archive/311465

= You Cannot Delegate Trusted Domain Object Creation =

PSS ID Number: 311465

Article Last Modified on 9/24/2003

-

The information in this article applies to:


 * Microsoft Windows 2000 Server SP1
 * Microsoft Windows 2000 Server SP2
 * Microsoft Windows 2000 Advanced Server SP1
 * Microsoft Windows 2000 Advanced Server SP2
 * Microsoft Windows 2000 Datacenter Server SP2
 * Microsoft Windows Server 2003, Standard Edition
 * Microsoft Windows Server 2003, Enterprise Edition
 * Microsoft Windows Server 2003, Datacenter Edition
 * Microsoft Windows Server 2003, 64-Bit Enterprise Edition
 * Microsoft Windows Server 2003, 64-Bit Datacenter Edition

-



This article was previously published under Q311465



SYMPTOMS
When you use a Windows 2000-based computer, you cannot delegate the creation of trusts to users who do not have administrator privileges. Even though you can grant a user Create TDO (Trusted Domain Objects) or Delete TDO rights in the System container of a Domain NC, the user is not granted the rights to create the trust.



CAUSE
This problem occurs because the trust creation tools (Active Directory Domains and Trusts) are hard-coded to require administrative privileges to create a trust.



RESOLUTION
To resolve this problem, use an account with administrative credentials when you create the trust.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

Keywords: kbenv kbpending kbprb KB311465

Technology: kbwin2000AdvServ kbwin2000AdvServSearch kbWin2000AdvServSP1 kbWin2000AdvServSP2 kbwin2000DataServ kbwin2000DataServSearch kbWin2000DataServSP2 kbwin2000Search kbwin2000Serv kbwin2000ServSearch kbwin2000ServSP1 kbwin2000ServSP2 kbWinAdvServSearch kbWinDataServSearch kbWinServ2003Data kbWinServ2003Data64bit kbWinServ2003Data64bitSearch kbWinServ2003DataSearch kbWinServ2003Ent kbWinServ2003Ent64bit kbWinServ2003Ent64bitSearch kbWinServ2003EntSearch kbWinServ2003Search kbWinServ2003St

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.