WIn2003 Trust betwee domains, same forest is possible ?

I have an important question:
Imagine I want to setup a separate domain to isolate "student" from "staff"
resources and provide different set of security policies.

On Win2003 AD, is possible and viable setup *two* domains, one way trust
under the *same* forest ?
I have conflicting information from two 'specialists':one says that two
domains configured within the same AD forest will be setup as two way trusts
(and he implied that such trust cannot be setup one way as I wish).

Therefore he tells me that if I determine that two domains with an one way
trust between is required, I must setup two separate forests to accomodate
this need. Is this true ?



.

Relevant Pages

  • Re: promlem with active diectory on windows 2000
    ... it allowed me setup the trust. ... Did you run ADMT from the target domain? ... believe this needs to be setup. ... was when the DNS server on the server wont work. ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD Multi Forest Help
    ... you cannot replicate objects or setup site links between different forest. ... for what you want to do you need to setup a trust between the forests. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Trusting Domains
    ... | From: "Chris DeFreitas" ... | created the trust between. ... | I have DNS setup on both sides. ... Are they both members of the same forest, ...
    (microsoft.public.win2000.active_directory)
  • Re: Moving users between different organizations
    ... The trust is only the first step. ... new forest to the old forest so that they have the correct permissions. ... setup a brand new system with Win2003, ... what I need to do is transfer over existing user accounts & email ...
    (microsoft.public.exchange.admin)
  • Re: Trusting Domains
    ... They are not in the same forest. ... created the trust between. ... I have DNS setup on both sides. ... Do you have name resolution working between forests, via the VPN link? ...
    (microsoft.public.win2000.active_directory)