DSCResources/MSFT_ADDomainTrust/en-US/about_ADDomainTrust.help.txt

.NAME
    ADDomainTrust
 
.DESCRIPTION
    The ADDomainTrust DSC resource will manage Domain Trusts within Active Directory. A trust is a relationship, which you establish between domains or forests. To understand more about trusts in Active Directory, please see the article [Forest Design Models](https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/forest-design-models) for more information.
 
    ## Requirements
 
    * Target machine must be running Windows Server 2008 R2 or later.
 
.PARAMETER Ensure
    Write - String
    Allowed values: Present, Absent
    Specifies whether the computer account is present or absent. Default value is 'Present'.
 
.PARAMETER TargetCredential
    Required - PSCredential
    Specifies the credentials to authenticate to the target domain.
 
.PARAMETER TargetDomainName
    Key - String
    Specifies the name of the Active Directory domain that is being trusted.
 
.PARAMETER TrustType
    Required - String
    Allowed values: External, Forest
    Specifies the type of trust. The value 'External' means the context Domain, while the value 'Forest' means the context 'Forest'.
 
.PARAMETER TrustDirection
    Required - String
    Allowed values: Bidirectional, Inbound, Outbound
    Specifies the direction of the trust.
 
.PARAMETER SourceDomainName
    Key - String
    Specifies the name of the Active Directory domain that is requesting the trust.
 
.PARAMETER AllowTrustRecreation
    Write - Boolean
    Specifies if the is allowed to be recreated if required. Default value is $false.
 
.EXAMPLE 1
 
This configuration will create a new one way inbound trust between two
domains.
 
Configuration ADDomainTrust_ExternalInboundTrust_Config
{
    param
    (
        [Parameter(Mandatory = $true)]
        [System.String]
        $SourceDomain,
 
        [Parameter(Mandatory = $true)]
        [System.String]
        $TargetDomain,
 
        [Parameter(Mandatory = $true)]
        [System.Management.Automation.PSCredential]
        $TargetDomainAdminCred
    )
 
    Import-DscResource -module ActiveDirectoryDsc
 
    node localhost
    {
        ADDomainTrust 'Trust'
        {
            Ensure = 'Present'
            SourceDomainName = $SourceDomain
            TargetDomainName = $TargetDomain
            TargetCredential = $TargetDomainAdminCred
            TrustDirection = 'Inbound'
            TrustType = 'External'
        }
    }
}
 
.EXAMPLE 2
 
This configuration will create a new one way inbound trust between two
domains, and allows the trust to recreated if it should have the wrong
trust type.
 
Configuration ADDomainTrust_ExternalInboundTrustWithOptInToRecreate_Config
{
    param
    (
        [Parameter(Mandatory = $true)]
        [System.String]
        $SourceDomain,
 
        [Parameter(Mandatory = $true)]
        [System.String]
        $TargetDomain,
 
        [Parameter(Mandatory = $true)]
        [System.Management.Automation.PSCredential]
        $TargetDomainAdminCred
    )
 
    Import-DscResource -module ActiveDirectoryDsc
 
    node localhost
    {
        ADDomainTrust 'Trust'
        {
            Ensure = 'Present'
            SourceDomainName = $SourceDomain
            TargetDomainName = $TargetDomain
            TargetCredential = $TargetDomainAdminCred
            TrustDirection = 'Inbound'
            TrustType = 'External'
            AllowTrustRecreation = $true
        }
    }
}