NT Gatekeeper: Understanding Interdomain Trust Relationship Limits

Learn about NT Server 4.0's theoretical and practical limits on the number of domain trust relationships.

Jan De Clercq

November 9, 2003

1 Min Read
ITPro Today logo in a gray background | ITPro Today

Does Windows NT Server 4.0 limit the number of domain trust relationships?

NT Server 4.0 has a practical limit of 128 trust relationships that originate from one domain and a theoretical limit of 256 trusts that originate from one domain. The limiting factor is the Local Security Authority (LSA) secrets, which are private data objects that NT uses to store security information. NT Server 4.0 limits the number of LSA secrets to 256. An outgoing trust relationship consumes one LSA secret for every DC in the domain. Because LSA secrets are also used for other purposes (e.g., to save the passwords for service accounts), Microsoft recommends that you use no more than half of the 256 LSA secrets for interdomain trust relationships.

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like