Deleted Trust was not removed with the errors „TrustIsOk False“, „TrustStatusString : The specified domain either does not exist or could not be contacted.“ and „Attr: quarantined“

Deleted Trust was not removed with the errors „TrustIsOk False“, „TrustStatusString : The specified domain either does not exist or could not be contacted.“ and „Attr: quarantined“

The trusts between this domain (Root.Dom) and the following domain(s) are in an error state: Deleted.Dom (inbound).

The error is: The specified domain either does not exist or could not be contacted. (0x54B)

We heared about a change at the weekend were “Deleted.Dom” was decommissioned and the trust to that domain was deleted via GUI.

Via adsiedit, there was no “trusted Domain” object found at “Default naming context \ Root.Dom \ System”.

But with several comands we are able to see the trust.

1. gwmi -namespace root\MicrosoftActiveDirectory -class Microsoft_DomainTrustStatus
2. NLTEST /trusted_domains
3. netdom query trust

If you know where these informations are stored, please let us know that. We haven’t found them anywhere.

And there we have seen serveral error messages:

1. TrustIsOk         : False
   TrustStatus       : 1355
   TrustStatusString : The specified domain either does not exist or could not be contacted.
2. Attr: quarantined

So we decided to make a force removal of the trust via netdom:

netdom trust Root.Dom /domain:Deleted.Dom /remove /force

But then nothing happend. After an hour we tried that again with an account that is enterprise admin. Now, after the replication time, the trust is really deleted and the SCOM errors are gone.