This procedure should only be performed if the TDO for the remote domain is not present in the System container. Right-click the object that represents the domain, and then click Properties . Click the Trusts tab, and then click Add to create both sides of the trust relationship to the remote domain. Because this would normally be a Kerberos trust, creating both sides of the trust is required. Active Directory cannot verify the trust.
Access is denied.
Click OK . Yes , and then supply the administrator credentials for the remote domain. Access is denied. Click OK . After both sides of the trust relationship have been created, run the following command.