6.1.6.8.5 userAccountControl

In a domain trust account, the userAccountControl attribute MUST have the flag ADS_UF_INTERDOMAIN_TRUST_ACCOUNT (0x00000800) set.