You cannot create a new trust through the Domains and Trusts console when you are logged on locally to a domain controller

When you are logged on locally to a domain controller and you try to create a new trust by using the Domains and Trusts console, the operation may be unsuccessful, and you may receive an "access denied" error message.

This issue occurs only if you are logged on locally to the domain controller as an ordinary user (through an account other than Administrator). By default, ordinary users are blocked from logging on locally to a domain controller unless Group Policy is modified to permit this.

To work around this issue, use one of the following methods:

• Use the Runas command with domain administrator credentials instead of entering credentials in the Domains and Trusts console.
  
  -or-
• Use the Runas command from another computer.

Note For more information about how to use Runas, see the "Using Run as" Windows 2003 Help Topic.

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.