Re: Domain Functional Levels and Trusts

YES

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)
# Jorge de Almeida Pinto #
BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
"Adam" <no@xxxxxxxxx> wrote in message
news:eLyD5VhFGHA.3728@xxxxxxxxxxxxxxxxxxxxxxx
> Herb -
>
> Thanks for the response, but I dont quite understand your explanation.
> First you say, "You can always (in any mode) use EXTERNAL trusts between a
> pair of domains which are not in the same forest.Those two domains may be
> in any mode or may even include an NT domain." Then you say, "Yes,
> indirectly this requires the domain to be in the Win2003 Server-native
> mode, but that is not the KEY requirement." It seems contradictory.
>
> So, can I form a trust between my Windows 2003 Functional Level Domain and
> a Windows 2000 Mixed Mode domain? Thanks!!
>
> Adam
>
>
> "Herb Martin" <news@xxxxxxxxxxxxxx> wrote in message
> news:uE6ncpgFGHA.3280@xxxxxxxxxxxxxxxxxxxxxxx
>> "Adam" <no@xxxxxxxxx> wrote in message
>> news:%230ClBhgFGHA.3780@xxxxxxxxxxxxxxxxxxxxxxx
>>> Hi Everyone -
>>>
>>> I need to build a trust between two domains in separate forests. One
>>> domain is Windows 2000 Mixed Mode and the other has a Windows 2003
>>> Domain Functional Level.
>>>
>>> I just want to confirm that because one of the domains has a Windows
>>> 2003 Functional Level, I will need to upgrade the other domain to the
>>> same level before the trust can be built, correct?
>>
>> No.
>>
>> You can always (in any mode) use EXTERNAL trusts between
>> a pair of domains which are not in the same forest.
>>
>> Those two domains may be in any mode or may even include
>> an NT domain.
>>
>> In fact, the domain mode is only peripherally relevant to the
>> other type of trust, i.e., Forest Trust, since this requires both
>> FORESTS to be in Win2003 Forest Functional Level.
>>
>> (Yes, indirectly this requires the domain to be in the Win2003
>> Server-native mode, but that is not the KEY requirement.)
>>
>> --
>> Herb Martin, MCSE, MVP
>> Accelerated MCSE
>> http://www.LearnQuick.Com
>> [phone number on web site]
>>
>>
>
>


.

Relevant Pages

  • Re: Raise "Forest" functional level & rename domain?
    ... When two forests are both at 2003 forest functional level you have two trust ... Cross-forest trusts have some benefits over standard domain trusts (e.g ... selective authentication, transitive across all domains in the forest, etc.). ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Functional Levels and Trusts
    ... other type of trust, i.e., Forest Trust ... A Forest Trust and an External trust are TWO DISTINCT types ... FORESTS to be in Win2003 Forest Functional Level. ... External trusts are possible in any MODE, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Raising the Domain and Forest Mode
    ... See also this article because of different security settings between NT4 and 2003 trust. ... domain (Windows Server 2003 Domain Mode) and a Windows NT domain, ... What you can think about is using forest trust's instead of two-way. ... The functional levels of the domain/forest are ...
    (microsoft.public.windows.server.active_directory)
  • Re: Raise "Forest" functional level & rename domain?
    ... when you say it will need to be a cross forest trust when both are at 2003, ... the domain we'd like to rename and leave the other one @ 2K level? ... > functional level of the domain/forest with which you have a trust. ...
    (microsoft.public.windows.server.active_directory)
  • 2003 Forest and Domain Functional Level
    ... out which functional level to set the forest and resource domain to. ... I would like to set our forest and domain functional level to Windows Server ...
    (microsoft.public.windows.server.active_directory)