Re: Trusts without a direct connection between domain controllers?

From: GeeB (Geeb_at_newsgroup.nospam)
Date: 06/28/05 

Date: Mon, 27 Jun 2005 18:33:27 -0400

I have a similar setup and our take for security reasons is not to even
attempt to have a trust between the two zones. All boxes in the secure zone
are handled by using Terminal Services to logon to the DC and manage the
domain from within the zone itself.
Other options:
- Windows Server 2003 Forest trusts
- Third-party tool that can manage any domain in any area regardless of any
trust or lack of it such as Quest or Bindview.

Interesting read:
http://www.microsoft.com/downloads/details.aspx?familyid=a97ddc48-a364-4756-bb3c-91da274118fe&displaylang=en

Relevant Pages

  • DANGER ZONE: Internet Explorer
    ... This may be achieved with the Internet Explorer series of so- ... and trust, ... The so-called "Trusted Site" zone setting in the Internet Explorer ... For example, we input into the so-called Trusted Zone, the ...
    (NT-Bugtraq)
  • DANGER ZONE: Internet Explorer
    ... This may be achieved with the Internet Explorer series of so- ... and trust, ... The so-called "Trusted Site" zone setting in the Internet Explorer ... For example, we input into the so-called Trusted Zone, the ...
    (Bugtraq)
  • [Full-Disclosure] DANGER ZONE: Internet Explorer
    ... This may be achieved with the Internet Explorer series of so- ... and trust, ... The so-called "Trusted Site" zone setting in the Internet Explorer ... For example, we input into the so-called Trusted Zone, the ...
    (Full-Disclosure)
  • Re: One Way Trust
    ... The secondary forward look up zone has been created on ... production domain has several domain controllers and I ... a outgoing one way external trust. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain trust problem
    ... You do this by performing a zone transfer from a DNS ... server in the foreign domain, to a newly appointed secondary DNS server for ... Is it safe to do zone transfer, can I broke something with doing that. ... > If you want to trust a windows nt domain it will be the best if you create> WINS replication between AD and NT4. ...
    (microsoft.public.windows.server.active_directory)