Re: Trusted domains

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

My specific case is that my itd.domain.com domain forest is a part of
domain.com domain forest,
and i want trust relationship between this two domain forests but without
merging this domains
forests into the one. Is it possible?

P.S. Sorry, for my english, it's not my native language...


"Paul Bergson [MVP-DS]" <pbergson@xxxxxxxxxxxxxxxxx> ñîîáùèë/ñîîáùèëà â
íîâîñòÿõ ñëåäóþùåå: news:egiOlhMaIHA.5980@xxxxxxxxxxxxxxxxxxxxxxx
I have given you starting steps previously to create a trust. Read through
the provided and then ask questions based on what isn't clear or specifics
on your scenario.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no
rights.

"Chumak Matfej" <chumakm@xxxxxxxxx> wrote in message
news:eHPm8zAaIHA.4684@xxxxxxxxxxxxxxxxxxxxxxx
Thank's for your answer...

I try to concretize what i mean...

I have my own forest itd.domain.com. Somewhere in time exists another
forest domain.com. They are independent
with no link betweens. Now, appear a link between this two forests. How
i can avoid merging of its.domain.com
and domain.com into one single forest but with trusts? I didn't what
merge two forests but only truests.

"Paul Bergson [MVP-DS]" <pbergson@xxxxxxxxxxxxxxxxx> ñîîáùèë/ñîîáùèëà â
íîâîñòÿõ ñëåäóþùåå: news:eF4qn$$ZIHA.4160@xxxxxxxxxxxxxxxxxxxxxxx
If you have two forests you can establish a trust and setup a one way or
two way trust. Once the trust is established you only have to provide
the level of trust you feel is necessary.

You really have been vague on what you are trying to accomplish, so
there is some info below.

Source must be nt4, 2000 or 2003
Target must be 2000 or 2003

First setup the dns so the two domains know of each others name space.
http://expertanswercenter.techtarget.com/eac/knowledgebaseAnswer/0,295199,sid63_gci1104911,00.html

Then establish a trust between the two forests
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/7929b0c4-efe1-409c-99e3-efe9815f426d.mspx

Webcast
http://www.microsoft.com/downloads/details.aspx?FamilyId=6F86937B-533A-466D-A8E8-AFF85AD3D212&displaylang=en


--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no
rights.

"Chumak Matfej" <chumakm@xxxxxxxxx> wrote in message
news:%23NftwZ8ZIHA.5980@xxxxxxxxxxxxxxxxxxxxxxx
Hello!

Can i make a trusted domains without merging tree when the 1st domain
is main.domain.com and the 2nd domain is test.main.domain.com?
I.e. can exists main.domain.com and test.main.domain.com like a
different domains but with trusts between?

P.S. I'm not trust admins from the main domain and didn't want give
them whole rights on my test.main.domain.com.

Thanks!










.

Relevant Pages

  • Re: creating one way trust
    ... of different forest. ... It sounds for me that you do not need/have a trust, ... Once everything is replicated from the win2k svr. ... Let me try to understan a little more about youre network. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Huge AD deployment
    ... That was the case in Windows 2000, but in Windows Server 2003 forest trusts ... note though is that a forest trust is only transitive for domains within the ... >> company.com in that data center and have every country trust company.com ... instead of going over the internet. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Migrating active directory and exchange
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Building the trust between the forests can be problematic. ... build a trust between the source and destination forest. ... You would then look at running exmerge if you are looking at moving ...
    (microsoft.public.win2000.active_directory)
  • Re: Domain Functional Levels and Trusts
    ... other type of trust, i.e., Forest Trust ... A Forest Trust and an External trust are TWO DISTINCT types ... FORESTS to be in Win2003 Forest Functional Level. ... External trusts are possible in any MODE, ...
    (microsoft.public.windows.server.active_directory)
  • RE: Two way forest trust fails only in one direction
    ... After deep research of the SMB signing, we saw that both servers need Reg Key: ... needed to match on both servers on both sides of the trust. ... B's Forest, but Company B can not access Company As forest at all. ... running DNS and WINS under Windows Active Directory. ...
    (microsoft.public.windows.server.active_directory)