Re: 2 Domains and Trusts

Tech-Archive recommends: Fix windows errors by optimizing your registry

Tiger US wrote:
Hi, I have 2 domains to manage. Domain A is a part of the AD Forest, and Domain B looks to be a subdomain of Domain A. I would like to use resources in both Domains from either side. Is this possible?

I want to be able to read files, print and even browse between the domains.


OK - it looks or it is? If You are not able to access resources between these domains right now it looks like this Domain B is different forest as between domains in the same forest trust relationships are created automatically.

In standard configuration You should be able to access resources between domains in the same forest - You just need to create appropriate ACls on these resources to include users from different domain

You can check if these are domains in the same forest by querying rootDSE object for rootdomainnamingcontext property, checking if they are sharing the same schema partition etc.


If these domains are in different forests You may establish forest trust which will let You do what You want to achieve.


--
Tomasz Onyszko
http://www.w2k.pl/blog/ - (PL)
http://blogs.dirteam.com/blogs/tomek/ - (EN)
.

Relevant Pages

  • Re: AD Forest Split procedure
    ... time and ressources a real migration could be done and thereby eliminate all ... Traditional Interforest migration where a new pristine AD forest is ... > etablished for one of the companies and their resources migrated to> this ... > the 2 organizations will have an unsupported environment afterwards. ...
    (microsoft.public.windows.server.active_directory)
  • "If Cambodias donors want the countrys natural resources to be managed in a way which benefits the C
    ... Other natural resources also at risk of exploitation as Cambodia’s ... RECENT government claims that Cambodia is nearing its Millennium ... Development Goal of maintaining 60 percent of forest coverage by 2010 ...
    (soc.culture.cambodia)
  • RE: New Site
    ... > If I do create another domain in my current forest, ... your resources from your old domain to your new domain before you remove ad ... to local resources if your wan links fail be sure to have a DC from each ... the wan link you won't have access to resources outside of the local lan. ...
    (microsoft.public.windows.server.active_directory)
  • Re: 2003 AD upgrade and consolidation
    ... Right now they don't share resources across companies. ... GPOs are NOT inherited by child domains, ... That's resource sharing and trusts too. ... Create the new forest domain. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Active Directory - security boundaries
    ... It doesn't actually make sense that the forest is the ONLY ... administrators in the internal domain (which is the forest root) will ... wouldn't be able to grant themselves access to resources in the other ... administrators of the standard domain can't grant themselves access to ...
    (microsoft.public.windows.server.active_directory)