Article ID: 922832
Article Last Modified on 1/29/2007
APPLIES TO
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Advanced Server
SYMPTOMS
If the following conditions are true, the DsEnumerateDomainTrusts function returns a value of NULL for a trusted domain security identifier (SID):
- The current domain is based on Microsoft Windows 2000.
- The trusted domain and the current domain are in the same forest.
- The trusted domain and the current domain do not have a direct trust relationship.
WORKAROUND
To work around this problem, follow these steps:
- Call the DsGetDcName function to retrieve the name of a domain controller in the trusted domain.
- Call the DsEnumerateDomainTrusts function. Apply the following settings:
- Set the server name to the domain controller name that you retrieved in step 1.
- Set the flag parameter to DS_DOMAIN_PRIMARY.
STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
MORE INFORMATION
For more information, visit the following Microsoft Web sites:
DsEnumerateDomainTrusts
http://msdn2.microsoft.com/en-us/library/ms675976.aspx
DsGetDcName
http://msdn2.microsoft.com/en-us/library/ms675983.aspx
Keywords: kbtshoot kbexpertiseinter kbprb KB922832