<div class="content"><p align="right"><a href="https://msdn.microsoft.com/en-us/library/63bab11c-a902-44a2-9cd7-221357788483" data-linktype="external">msdn link</a></p><p>The <b>NetrGetForestTrustInformation</b> method SHOULD<a id="Appendix_A_Target_228"></a><a aria-label="Product behavior note 228" href="0c858a52-732a-43ec-85dd-e44b357c1898#Appendix_A_228" data-linktype="relative-path">&lt;228&gt;</a> retrieve the <a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_5ee032d0-d944-4acb-bbb5-b1cfc7df6db6" data-linktype="relative-path">trust</a> information for the <a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_fd104241-4fb3-457c-b2c4-e0c18bb20b62" data-linktype="relative-path">forest</a> of which the
member&#39;s domain is itself a member. </p><dl>
<dd>
<div><pre> NTSTATUS NetrGetForestTrustInformation(
   [in, unique, string] LOGONSRV_HANDLE ServerName,
   [in, string] wchar_t* ComputerName,
   [in] PNETLOGON_AUTHENTICATOR Authenticator,
   [out] PNETLOGON_AUTHENTICATOR ReturnAuthenticator,
   [in] DWORD Flags,
   [out] PLSA_FOREST_TRUST_INFORMATION* ForestTrustInfo
 );
</pre></div>
</dd></dl><p><b>ServerName: </b>The custom binding handle, as
defined in section <a href="3b224201-b531-43e2-8c79-b61f6dea8640" data-linktype="relative-path">3.5.4.1</a>.</p><p><b>ComputerName: </b>The null-terminated Unicode
string that contains the client computer <a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_0334e0bd-2755-42f6-aeff-2d4a22bf4abf" data-linktype="relative-path">NetBIOS name</a>.</p><p><b>Authenticator: </b>A pointer to a <a href="76c93227-942a-4687-ab9d-9d972ffabdab" data-linktype="relative-path">NETLOGON_AUTHENTICATOR</a>
structure, as specified in section 2.2.1.1.5, that contains the client <a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_e72a2c02-84a2-4ce3-b66f-86f725642dc3" data-linktype="relative-path">authenticator</a>.</p><p><b>ReturnAuthenticator: </b>A pointer to a <b>NETLOGON_AUTHENTICATOR</b>
structure, as specified in section 2.2.1.1.5, that contains the server return
authenticator.</p><p><b>Flags: </b>MUST be set to zero and MUST be ignored
on receipt.</p><p><b>ForestTrustInfo: </b>A pointer to an <a href="../ms-lsad/2993ffab-c0c8-4643-9a79-4ff7d31922dc" data-linktype="relative-path">LSA_FOREST_TRUST_INFORMATION</a>
structure, as specified in <a href="../ms-lsad/1b5471ef-4c33-4a91-b079-dfcbb82f05cc" data-linktype="relative-path">[MS-LSAD]</a>
section 2.2.7.25, that contains data for each <a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_035d9ce5-f117-4251-8d4d-127c462ec4a0" data-linktype="relative-path">forest trust</a>.</p><p><b>Return Values: </b>The method returns 0x00000000
on success; otherwise, it returns a nonzero error code.</p><p>On receiving this call, the server MUST perform the
following validation steps:</p><ul><li><p><span><span> 
</span></span>Apply Common Error Processing Rule A, specified in section <a href="2d776bfc-e81f-4c8f-9da8-4c2920f65413" data-linktype="relative-path">3</a>.</p>
</li><li><p><span><span> 
</span></span>Using the <i>ComputerName</i> for the <a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_08ce423c-9f9c-48ed-afa8-8b64c04ecdca" data-linktype="relative-path">secure channel</a> to find the
corresponding record in the ClientSessionInfo table, verify the <i>Authenticator</i>
parameter (section <a href="da7acaa3-030b-481e-979b-f58f89389806" data-linktype="relative-path">3.1.4.5</a>).
If the <i>Authenticator</i> parameter is valid, compute the <i>ReturnAuthenticator</i>
parameter returned (section 3.1.4.5). Otherwise, the server MUST return
STATUS_ACCESS_DENIED.</p>
</li><li><p><span><span> 
</span></span>Ensure that the caller is a DC in a different domain by checking
that the <i>SecureChannelType</i> from ChallengeTable is
TrustedDnsDomainSecureChannel or TrustedDomainSecureChannel. For all other
types, this call MUST return STATUS_NOT_IMPLEMENTED.</p>
</li><li><p><span><span> 
</span></span>Apply Common Error Processing Rule B, specified in section 3, to
the <i>ServerName</i> parameter.</p>
</li></ul><p>The <a href="b5e7d25a-40b2-41c8-9611-98f53358af66#gt_8c0b82d9-efec-4723-95a9-8564edf9ba44" data-linktype="relative-path">forest
trust information</a> for the domain hosted by <i>ServerName</i> MUST be
returned.</p><p>This method SHOULD only be called by a machine that has
established a secure channel with the server.</p></div>