Re: Forest Trusts are backwards?
From: Ace Fekay [MVP] (PleaseSubstituteMyActualFirstName&LastNameHere_at_hotmail.com)
Date: 09/27/04
- Next message: Herb Martin: "Re: Rejoin Computer to domain"
- Previous message: Ace Fekay [MVP]: "Re: Active Directory and Firewall"
- In reply to: Spin: "Forest Trusts are backwards?"
- Messages sorted by: [ date ] [ thread ]
Date: Sun, 26 Sep 2004 23:09:33 -0400
In news:2ro12kF1clet0U1@uni-berlin.de,
Spin <spin@spin.com> made a post then I commented below
> Gurus,
>
> Given two Windows Server 2003 forests.
>
> I originally created Forest A.
> Then I created Forest B, which sits in a DMZ.
> Both forests are in the same network infrastructure.
>
> I want Forest B in the DMZ to trust my original Forest A, but do not
> want Forest A to trust Forest B in case Forest B gets compromised.
>
> I created what I thought was correct, a one-way outgoing trust from
> Forest B pointing to Forest A. In Forest B, at the CTL+ALT+DEL logon
> box, I have the option to log into either Forest A or B. In Forest
> A, I only have the option to log into Forest A.
>
> Question #1) Shouldn't this be the other way around? In my situation
> B trusts A and I can log into either A or B from at any computer in
> Forest B. At any computer in Forest A, I can only log into Forest A.
> Question #2) In Forest B, once I make a connection to any computer in
> Forest A and specify a username and password, all subsequent
> connections to that computer do not prompt for a username and
> password. I do not want this behavior. I heard this was due to
> Credential Manager but I looked that up and it seems to apply only to
> Windows XP. Can some expert please un-confuse me?
Just to reiterate Scott, not a good idea.
You're probably better off creating an identical user/pass on both domains
so you can access resources both ways.
As for the trust directions, if B trusts A, then you're letting A accounts
into the B domain, hence why the A domain will not show the B domain in the
dropdown list.
-- Regards, Ace Please direct all replies ONLY to the Microsoft public newsgroups so all can benefit. This posting is provided "AS-IS" with no warranties or guarantees and confers no rights. Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP Microsoft Windows MVP - Windows Server - Directory Services Security Is Like An Onion, It Has Layers HAM AND EGGS: A day's work for a chicken; A lifetime commitment for a pig. -- =================================
- Next message: Herb Martin: "Re: Rejoin Computer to domain"
- Previous message: Ace Fekay [MVP]: "Re: Active Directory and Firewall"
- In reply to: Spin: "Forest Trusts are backwards?"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
