Re: Trust Relationship

I have not tried it myself but the link below from JSI may help. Also since
this is a Windows 2000 newsgroup FYI you can not create a trust between
forests in Windows 2000 but you can in Windows 2003 if both forests are at
Windows 2003 functional level but you can create trusts between domains in
different forests. Beyond trying to "hide" the trusting domain from users in
a trusted domain make sure your access control lists allow only those that
need access which means you do not want to have shares with permissions for
everyone/authenticated users but instead global groups that you want to have
access. --- Steve

http://www.jsifaq.com/SUBR/tip8700/rh8750.htm


"Asif Razzaq Attari" <AsifRazzaqAttari@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:2210610F-F398-481D-BF76-395ABFD86050@xxxxxxxxxxxxxxxx
>I want to create a trust between two forest test.com & test1.com. But as
> security reason domain users of test.com cant see test1.com domain in
> their
> Logon window.
> --
> I like Microsoft Newsgroups, Which provides to help me.
>
> Thanks to Microsoft


.

Relevant Pages

  • Re: cross-forrests trusts on routed networks with NAT
    ... "Rup And" wrote in message ... So you can put a trust between the 2 forest root domains of your 2 forests - ... > One forrest build on Windows2000 and one forrst build on Windows 2003 ...
    (microsoft.public.windows.server.active_directory)
  • Re: cross-forrests trusts on routed networks with NAT
    ... > How do I configure DNS in the following scenario? ... > I need to establish a cross-forrest trust between a windows 2000 and ... Do you mean a normal trust relationship between any 2 domains in different ... Top level forests trusts are only available between Windows Server 2003 ...
    (microsoft.public.windows.server.active_directory)
  • Re: Setting up a trust - easy as pie or what?
    ... companies merged would be useful to have authentication occur automatically ... Our domain here is in windows 2003 mode, their's is in windows 2000 mixed ... > Hmmm - "If these are separate forests, they must both be at Windows Server ... This is so if you want to create a Forest trust - ...
    (microsoft.public.windows.server.general)
  • Re: DNS for trusts between separate private forests accross the Intern
    ... Windows 2003 native forests that could reach each other via the internet. ... How do I setup DNS so that that other domain controller can be found via its public IP address? ... a secondary copy of each other's zone need to exist in each other so they can resolve each other in a true Windows 2003 Forest trust. ...
    (microsoft.public.windows.server.dns)
  • Re: One-way trust, Kerberos & IIS
    ... The forest of Domain A is at best Windows 2000 native. ... If you want a trust that supports Kerberos ... you need W2k3 mode forests and a forest-level trust. ... Domain A authentication appears to be using the fall back of NTLM. ...
    (microsoft.public.inetserver.iis.security)