Re: Trust between domain



hi,

I think i know what i should do, the thing i wan is both,thank you very much
for your information.


"Jorge de Almeida Pinto [MVP]" wrote:

do you want:
(1) users from DOMAIN_A to logon to clients from DOMAIN_A and DOMAIN_B?
(2) users from DOMAIN_B to logon to clients from DOMAIN_B and DOMAIN_A?
(3) both?

(3) needs a two way trust
(1) and (2) are one way trust, but the direction differs

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
<ckwong19802003@xxxxxxxxx> wrote in message
news:56D2C6E6-84CB-409A-826E-9B0BA13E7156@xxxxxxxxxxxxxxxx
hi,

If i want it to have 1 usual domain and then another trust domain on both
machine that is the dc.is this will be the 2 way trust?



"Jorge de Almeida Pinto [MVP]" wrote:

ok..

when having a single domain:
* on a server or client you will be able to logon locally or to the
domain
the server/client belongs to
* on a DC you will be able to logon to the domain the DC belongs to (DCs
don't have local users)

when having multiple domains that TRUST each other:
* on a server or client you will be able to logon locally or to the
domain
the server/client belongs to AND to the TRUSTED domain
* on a DC you will be able to logon to the domain the DC belongs to (DCs
don't have local users) AND to the TRUSTED domain

SO YES, your logon box will show the usual domain and the trusted domain
as
soon as the trust is in place

but it also depends how you want to setup the trust... one way or two
way?

an example...

DOMAIN_A and DOMAIN_B

do you want:
(1) users from DOMAIN_A to logon to clients from DOMAIN_A and DOMAIN_B?
(2) users from DOMAIN_B to logon to clients from DOMAIN_B and DOMAIN_A?
(3) both?
--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
<ckwong19802003@xxxxxxxxx> wrote in message
news:7064B139-CBAB-451D-AFB0-773D717C943E@xxxxxxxxxxxxxxxx
mean on the server01 during the first time it will just have the
domain1
on
the login screen during the first time, is that after we do a trust we
can
choose to login to which domain


"Jorge de Almeida Pinto [MVP]" wrote:

I don't understand what you mean..

what do you want to achieve?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
<ckwong19802003@xxxxxxxxx> wrote in message
news:151AD5AC-6457-498B-BA5A-DEDD9005D5FD@xxxxxxxxxxxxxxxx
hi

Is that mean on both side of the server on the login page we will
see 2
domain.Kindly advise


"Jorge de Almeida Pinto [MVP]" wrote:

if both have w2k3 dcs and are at forest functional level windows
server
2003
you can create a forest trust, otherwise you can create an external
trust

the procedure to setup a trust is explained in:
for external trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/b30ef067-746e-4453-b879-804259aafdd3.mspx

for forest trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/7929b0c4-efe1-409c-99e3-efe9815f426d.mspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers
no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
<ckwong19802003@xxxxxxxxx> wrote in message
news:392E8D20-7129-4398-838E-3EB4C629F770@xxxxxxxxxxxxxxxx
hi,

Will like to ask what i should do if i have a server01 with
domain1
need a
trust with a server02 with domain2.Is that during the login on
the
server01 i
will have the domain1 and domain2.kindly advise how to make a
trust.












.



Relevant Pages

  • Re: Trust between domain
    ... users from DOMAIN_A to logon to clients from DOMAIN_A and DOMAIN_B? ... and are one way trust, ... on a server or client you will be able to logon locally or to the ...
    (microsoft.public.windows.server.active_directory)
  • Re: logon and network drive access slow after firewall
    ... Have a huge problem with the network moving very slowly. ... This is a Windows 2000 server with mostly XP clients and some windows 98 ... need to route through a server. ... Logon is slow where? ...
    (microsoft.public.win2000.networking)
  • Re: Client performance problem windows 2003 server...
    ... it seems site B's clients have not contacted ... site B's clients logon, it first contact site A's DC and try many times, ... >Subject: Re: Client performance problem windows 2003 server... ... >suggest you only set the Primary DNS and WINS to point to Win2k3 server to ...
    (microsoft.public.windows.server.networking)
  • RE: Certain clients not able to bind to domain or receive group policy
    ... logon to domain and get errors when they logon to client computer. ... Also please make sure all clients point to the SBS server's internal IP ... server are pointing to the SBS internal IP address of the only DNS server. ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS2003, VPN and a Win 2003 R2
    ... clients take long time to logon domain. ... The new SBS 2003 computer must be a domain controller that is installed on ... The new SBS 2003 computer must be a global catalog server and must be the ...
    (microsoft.public.windows.server.sbs)

Loading