Hello,
a customer is asking us to cleanup the ForeingSecurityPrincipals container in a Windows 2008 Domain.
The situation is they had a trust relationship with a Windows 2000 Domain, and using the ADMT they migrated users and computers accounts to the Windows 2008 Domain. Then the trust relationship was removed and the Windows 2000 Domain was decommissioned.
The question is if is possible to cleanup the ForeingSecurityPrincipals container.
I know that while the trust relationship is established certain objects may be in use, but is possible that some of the objects of this container is being used after having removed the trust relationship?
Thanks