Your network contains one Active Directory forest named contoso.com. The forest contains two child domains and six domain controllers. The domain controllers
are configured as shown in the following table.
You create a trust between contoso.com and a domain in another forest at a partner company.
You need to prevent the sales.contoso.com and the manufacturing.contoso.com names from being used in authentication requests across the forest trust.
What should you use?
The Netdom trust command establishes, verifies, or resets a trust relationship between domains.
Parameters include /RemoveTLNEX:
Removes the specified top level name exclusion (DNS Name Suffix) from the forest trust info from the specified trust. Valid only for a forest transitive non-Windows
realm trust and can only be performed on the root domain for a forest.
Reference: Netdom trust