NETDOM TRUST trusting_domain_name /Domain:trusted_domain_name /UserD:user /PasswordD:[password | /UserO:user /PasswordO:[password ...

NETDOM TRUST trusting_domain_name /Domain:trusted_domain_name [/UserD:user]            [/PasswordD:[password | *]] [/UserO:user] [/PasswordO:[password | *]]            [/Verify] [/RESEt] [/PasswordT:new_realm_trust_password]            [/Add] [/REMove] [/Twoway] [/REAlm] [/Kerberos]             [/Transitive[:{yes | no}]]            [/OneSide:{trusted | trusting}] [/Force] [/Quarantine[:{yes | no}]]            [/NameSuffixes:trust_name [/ToggleSuffix:#]]            [/EnableSIDHistory[:{yes | no}]]            [/ForestTRANsitive[:{yes | no}]]            [/CrossORGanization[:{yes | no}]]            [/AddTLN:TopLevelName]            [/AddTLNEX:TopLevelNameExclusion]            [/RemoveTLN:TopLevelName]            [/RemoveTLNEX:TopLevelNameExclusion]            [/SecurePasswordPrompt]  NETDOM TRUST Manages or verifies the trust relationship between domains  trusting_domain_name is the name of the trusting domain  /Domain             Specifies the name of the trusted domain or Non-Windows                      Realm.  /UserD              User account used to make the connection with the domain                     specified by the /Domain argument  /PasswordD          Password of the user account specified by /UserD. A *                      means to prompt for the password  /UserO              User account for making the connection with the trusting                     domain  /PasswordO          Password of the user account specified By /UserO. A *                      means to prompt for the password  /Verify             Verifies that the trust is operating properly  /RESEt              Resets the trust passwords between two domains. The                      domains can be named in any order. Reset is not valid                      on a trust to a Kerberos realm unless the /PasswordT                      parameter is included.  /PasswordT          New trust password, valid only with the /Add or /RESEt                      options and only if one of the domains specified is a                      non-Windows Kerberos realm. The trust password is set on                      the Windows domain only and thus credentials are not                      needed for the non-Windows domain.  /Add                Specifies that a trust be created.  /REMove             Specifies that a trust be removed.  /Twoway             Specifies that a trust relationship should be                      bidirectional  /OneSide            Indicates that the trust be created for or removed from                      only one of the domains in the trust.                     Use the keyword "trusted" to create or remove the trust                     from the trusted domain (the domain named with the /D                      parameter). Use the keyword "trusting" to create or                      remove the trust from the trusting domain. This command is                     valid only with the /Add and /REMove options and requires                      the /PasswordT command when used with the /Add option.  /REAlm              Indicates that the trust is to be created to a non-Windows                     Kerberos realm. Valid only with the /Add option. The                     /PasswordT option is required.  /TRANSitive         Valid only for a non-Windows Kerberos realm. Specifying                      "yes" sets it to a transitive trust. Specifying "no" sets                     it to a non-transitive trust. If neither is specified,                      then the current transitivity state will be displayed.  /Kerberos           Specifies that the Kerberos authentication protocol should                     be verified between a domain or workstation and a target                      domain; You must supply user accounts and passwords for                      both the object and target domain.  /Force              Valid with the /REMove option. Forces the removal of the                      trust (and cross-ref) objects on one domain even if the                      other domain is not found or does not contain matching                      trust objects. You must use the full DNS name to specify                      the domain.                     CAUTION: this option will completely remove a child domain.