question

Jason-4652 avatar image
0 Votes"
Jason-4652 asked FanFan-MSFT commented

Trust password not accepted from one side

Hi,
I'm trying to setup bi-directional domain/forest level trust between two separate domains.
I've setup DNS conditional forwarding so each can contact each other, in fact they are in same physical network.
I can create Trust from one domain without an issue, but the other domain I can not create the Trust because it won't accept Trust password.
It keep saying the Trust password is not a strong password, no mater how complex it is.
Any ideas?
87808-image.png


windows-server
image.png (18.0 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,
Welcome to share your current situation if there are any updates.
Please feel free to let us know if you need further assistance.
 
Best Regards,

0 Votes 0 ·
FanFan-MSFT avatar image
0 Votes"
FanFan-MSFT answered

Hi,
Welcome to share here!
Did you check the password policy for the domain in which can not create the Trust?
Did you customer the password filter in the domain?
If possible, please share a screeshot of the password policy here:
You can get the default domain policy by PowerShell command: Get-ADDefaultDomainPasswordPolicy

Best Regards,

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Jason-4652 avatar image
0 Votes"
Jason-4652 answered FanFan-MSFT commented

Here are password policies from both domains.
they are same exactly, turns out.

88243-image.png



image.png (12.6 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.