Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

You cannot create a new trust through the Domains and Trusts console when you are logged on locally to a domain controller

View products that this article applies to.


When you are logged on locally to a domain controller and you try to create a new trust by using the Domains and Trusts console, the operation may be unsuccessful, and you may receive an "access denied" error message.

↑ Back to the top


This issue occurs only if you are logged on locally to the domain controller as an ordinary user (through an account other than Administrator). By default, ordinary users are blocked from logging on locally to a domain controller unless Group Policy is modified to permit this.

↑ Back to the top


To work around this issue, use one of the following methods:
  • Use the Runas command with domain administrator credentials instead of entering credentials in the Domains and Trusts console.

  • Use the Runas command from another computer.
Note For more information about how to use Runas, see the "Using Run as" Windows 2003 Help Topic.

↑ Back to the top


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top

Keywords: KB817013, kbbug

↑ Back to the top

Article Info
Article ID : 817013
Revision : 8
Created on : 2/28/2007
Published on : 2/28/2007
Exists online : False
Views : 106