Your network contains one Active Directory forest named contoso.com. The forest contains two
child domains and six domain controllers. The domain controllers are configured as shown in the
following table.
You have a trust from contoso.com to another forest named fabrikam.com.
You plan to migrate users from contoso.com to fabrikam.com.
You need to ensure that the users who migrated to fabrikam.com can continue to access shared
resources in contoso.com. The solution must not require administrators to modify permissions to
shared resources.
What should you use?
A.
Set-ADSite
B.
Set-ADReplicationSite
C.
Set-ADDomain
D.
Set-ADReplicationSiteLink
E.
Set-ADGroup
F.
Set-ADForest
G.
Netdom
Explanation:
The Netdom move command moves a workstation or member server to a new domain. The act of
moving a computer to a new domain creates an account for the computer on the domain, if it does
not already exist. Technet, Netdom move
https://technet.microsoft.com/en-us/library/cc788127.aspx
Maybe I misread the question, but this seems to be related to sidFiltering though the answer is the same:
https://technet.microsoft.com/en-us/library/cc794801(v=ws.10).aspx
To disable SID filter quarantining for the trusting domain
Open a Command Prompt.
At the command prompt, type the following command, and then press ENTER:
Netdom trust /domain: /quarantine:No /userD: /passwordD:
0
0
in fact you will have to use the /enablesidhistory switch (not /quarantine), because you’re configuring a forest trust here (while /quarantine is used for domain trust)
0
0