Domain – Purposefully break trust relationship with Windows Domain

active-directorydomaintrust-relationshipwindows-server-2016

For testing purposes I am trying to purposefully break trust relationships with the Windows Domain. What is the quickest way to kill it off? "Unfortunately", broken trust relationships don't regularly occur with my set up so I'd like a way to artificially break one.

If possible, I'd like to be able to trigger this from both the server and client side.

Using Windows Server 2016 Core and Windows 7/8.1 clients.

Best Answer

Right click the computer object in Active Directory Users and Computers... select Reset Account. This will break the trust between the computer account and the domain.

You can use Powershell, netdom, or nltest to recreate/fix the trust.

Related Topic