Re: Domain Trust Questions

Tech-Archive recommends: Speed Up your PC by fixing your registry

Hi Meinolf,

thank you very much.

Best Regards.

Luiz

"Meinolf Weber" wrote:

Hello Luiz,

UserX will authenticate in the x-domain and is allowed to access ressources
in the y-domain. Y-domain does not now the account UserX from x-domain. See
here for the forest authentication process:

Scroll down/search for "Kerberos Authentication Process Over Forest Trusts"
in:
http://technet.microsoft.com/en-us/library/cc773178.aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Let explain better:
- I have 2 forest, x.lab and y.local, I configure the Trust between
the
forest.
The question is if the user in x.lab can log on in y.local domain.
Is it possible?
Thanks for the patience :-)

Regards.

Luiz

"Marcin" wrote:

Luiz,
I'm still not sure what you mean - if the user x is a member of the
x.lab
domain - how exactly he would log on to the y.local domain?
hth
Marcin
"Luiz" <Luiz@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:3C16D601-0177-4599-A4AE-B9E5DE2F63CE@xxxxxxxxxxxxxxxx

Hi Marcin,

thank you for your help.
About the second question, sorry about the confusion :-)
The question is:
- when the trust is done it doesn´t mean that the user might log on
the
trusted domains. Example: the x.lab trus y.local so the x user will
be
able
to log on the y domain.
If is confuse, please, tell me.
Thanks again.

Best Regards.

Luiz

"Marcin" wrote:

Luiz,
the recommended way to share resources between users in two
separate
domains
is to establish a trust relationship between them. To accomplish
this,
you
will need to provide the name resolution mechanism between them,
which
can
be done using the method you described (you can also create
secondary
zones
on both sides). Once the trust relationship is in place, you would
typically
add individual users, or a global/universal group from the other
domain
to a
domain local group in the local domain.
Can you rephrase (or elaborate on) your second question?
hth
Marcin
"Luiz" <Luiz@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:50BD174B-85CF-41EB-AEA3-15CEBB88DCED@xxxxxxxxxxxxxxxx

Hi,

I have some questions about Trust between two domains, if anyone
could
help
me I appreciate:
- I have one domain x.lab and y.local and I want the users from
both
domains
can get/access some resources from both sides and ping each other.
To
do
that
I must configure the forwarder option to point to both DNS servers
(x
and
y)
and create a global group in each domain and then put it in a
universal
group, is that right?
Another question, when I make the Trust in my authentication
window
doesn´t
appear the x.lab or y.local, does it?
Thanks for while.

Regards.

Luiz




.

Relevant Pages

  • Re: Domain Trust Questions
    ... Scroll down/search for "Kerberos Authentication Process Over Forest Trusts" in: ... - I have 2 forest, x.lab and y.local, I configure the Trust between ... or a global/universal group from the other ...
    (microsoft.public.windows.server.active_directory)
  • Re: SID filter between a W2k and a W2k Domain
    ... Best regards ... Disclaimer: This posting is provided "AS IS" with no warranties, ... I created a W2k Test Domain this morning and I did a trust between the ...
    (microsoft.public.windows.server.migration)
  • RE: Guidence required in the low level workings of Domain Trusts
    ... Everything is working fine with the trust and DNS but that doesn't mean it ... How to optimize pass-through authentication of user accounts after you ... How Domain Controllers Are Located in Windows ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD Trust Breaks - object found same name as domain. Help Pleas
    ... There are currently no logon servers available to service the logon request. ... This may lead to authentication problems. ... The session setup to the Windows NT or Windows 2000 Domain Controller ... This was when I realised the trust was playing up! ...
    (microsoft.public.windows.server.active_directory)
  • Re: External Trust Question
    ... Its a two way trust with domain wide authentication. ... from domainA.com to resources in domainB.com - Using the mmc snap-in i ... domainA.com - cant connect to domainB.com's AD - cant add users or groups ...
    (microsoft.public.windows.server.active_directory)