Deleted Trust was not removed with the errors „TrustIsOk False“, „TrustStatusString : The specified domain either does not exist or could not be contacted.“ and „Attr: quarantined“
The trusts between this domain (Root.Dom) and the following domain(s) are in an error state: Deleted.Dom (inbound).
The error is: The specified domain either does not exist or could not be contacted. (0x54B)
We heared about a change at the weekend were “Deleted.Dom” was decommissioned and the trust to that domain was deleted via GUI.
Via adsiedit, there was no “trusted Domain” object found at “Default naming context \ Root.Dom \ System”.
But with several comands we are able to see the trust.
- gwmi -namespace root\MicrosoftActiveDirectory -class Microsoft_DomainTrustStatus
- NLTEST /trusted_domains
- netdom query trust
If you know where these informations are stored, please let us know that. We haven’t found them anywhere.
And there we have seen serveral error messages:
- TrustIsOk : False
TrustStatus : 1355
TrustStatusString : The specified domain either does not exist or could not be contacted. - Attr: quarantined
So we decided to make a force removal of the trust via netdom:
netdom trust Root.Dom /domain:Deleted.Dom /remove /force
But then nothing happend. After an hour we tried that again with an account that is enterprise admin. Now, after the replication time, the trust is really deleted and the SCOM errors are gone.