Re: Trusted domains

Tech-Archive recommends: Fix windows errors by optimizing your registry

Thank's for your answer...

I try to concretize what i mean...

I have my own forest itd.domain.com. Somewhere in time exists another forest
domain.com. They are independent
with no link betweens. Now, appear a link between this two forests. How i
can avoid merging of its.domain.com
and domain.com into one single forest but with trusts? I didn't what merge
two forests but only truests.

"Paul Bergson [MVP-DS]" <pbergson@xxxxxxxxxxxxxxxxx> ñîîáùèë/ñîîáùèëà â
íîâîñòÿõ ñëåäóþùåå: news:eF4qn$$ZIHA.4160@xxxxxxxxxxxxxxxxxxxxxxx
If you have two forests you can establish a trust and setup a one way or
two way trust. Once the trust is established you only have to provide the
level of trust you feel is necessary.

You really have been vague on what you are trying to accomplish, so there
is some info below.

Source must be nt4, 2000 or 2003
Target must be 2000 or 2003

First setup the dns so the two domains know of each others name space.
http://expertanswercenter.techtarget.com/eac/knowledgebaseAnswer/0,295199,sid63_gci1104911,00.html

Then establish a trust between the two forests
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/7929b0c4-efe1-409c-99e3-efe9815f426d.mspx

Webcast
http://www.microsoft.com/downloads/details.aspx?FamilyId=6F86937B-533A-466D-A8E8-AFF85AD3D212&displaylang=en


--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no
rights.

"Chumak Matfej" <chumakm@xxxxxxxxx> wrote in message
news:%23NftwZ8ZIHA.5980@xxxxxxxxxxxxxxxxxxxxxxx
Hello!

Can i make a trusted domains without merging tree when the 1st domain is
main.domain.com and the 2nd domain is test.main.domain.com?
I.e. can exists main.domain.com and test.main.domain.com like a different
domains but with trusts between?

P.S. I'm not trust admins from the main domain and didn't want give them
whole rights on my test.main.domain.com.

Thanks!






.

Relevant Pages

  • Re: creating one way trust
    ... of different forest. ... It sounds for me that you do not need/have a trust, ... Once everything is replicated from the win2k svr. ... Let me try to understan a little more about youre network. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Huge AD deployment
    ... That was the case in Windows 2000, but in Windows Server 2003 forest trusts ... note though is that a forest trust is only transitive for domains within the ... >> company.com in that data center and have every country trust company.com ... instead of going over the internet. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Migrating active directory and exchange
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Building the trust between the forests can be problematic. ... build a trust between the source and destination forest. ... You would then look at running exmerge if you are looking at moving ...
    (microsoft.public.win2000.active_directory)
  • Re: Domain Functional Levels and Trusts
    ... other type of trust, i.e., Forest Trust ... A Forest Trust and an External trust are TWO DISTINCT types ... FORESTS to be in Win2003 Forest Functional Level. ... External trusts are possible in any MODE, ...
    (microsoft.public.windows.server.active_directory)
  • RE: Two way forest trust fails only in one direction
    ... After deep research of the SMB signing, we saw that both servers need Reg Key: ... needed to match on both servers on both sides of the trust. ... B's Forest, but Company B can not access Company As forest at all. ... running DNS and WINS under Windows Active Directory. ...
    (microsoft.public.windows.server.active_directory)