AddsTrusts.adoc

DSC Resource 'AddsTrusts'

AddsTrusts creates new forest or external domain trusts.

When to use 'AddsTrusts'

Use this resource when you need to establish trust relationships between Active Directory domains or forests. This is necessary when users in one domain need to access resources in another domain, such as during mergers, cross-forest collaboration, or multi-domain architectures.

A trust is a relationship, which you establish between domains or forests. To understand more about trusts in Active Directory, please see the article Forest Design Models for more information.

Source	https://github.com/dsccommunity/CommonTasks/tree/main/source/DSCResources/AddsTrusts
DSC Resource	ActiveDirectoryDsc
Documentation	ADDomainTrust WaitForADDomain

Table 1. Attributes of category 'AddsTrusts'

Parameter	Attribute	DataType	Description	Allowed Values
Trusts	Mandatory	Hashtable[]	The list of trusts to configure. Includes WaitForADDomain for each TargetDomainName

Table 2. Attributes of DSC Resource 'AddsTrusts/Trusts'

Parameter	Attribute	DataType	Description	Allowed Values
SourceDomainName	Key	String	Specifies the name of the Active Directory domain that is requesting the trust.
TargetDomainName	Key	String	Specifies the name of the Active Directory domain that is being trusted.
TargetCredential	Mandatory	PSCredential	Specifies the credentials to authenticate to the target domain.
TrustType	Mandatory	String	Specifies the type of trust. The value External means the context Domain, while the value Forest means the context Forest.	External Forest
TrustDirection	Mandatory	String	Specifies the direction of the trust.	Bidirectional Inbound Outbound
AllowTrustRecreation		Boolean	Specifies if the trust is allowed to be recreated if required.	True False (default)
Ensure		String	Specifies whether the trust is present or absent.	Present (default) Absent

Example

AddsTrusts:
  Trusts:
    - TargetDomainName: northwindtraders.com
      TargetCredential: '[ENC=PE9ianMgVmVyc2lvbj0iMS4xLjAuMSIgeG1sbnM9...=]'
      TrustDirection: Bidirectional
      TrustType: Forest
      SourceDomainName: contoso.com
    - TargetDomainName: partsunlimited.com
      TargetCredential: '[ENC=PE9ianMgVmVyc2lvbj0iMS4xLjAuMSIgeG1sbnM9...=]'
      TrustDirection: Outbound
      TrustType: External
      SourceDomainName: contoso.com

See also

• AddsDomain

• AddsWaitForDomains