Re: One-way inbound trusts

In article <eCk33P8OGHA.1288@xxxxxxxxxxxxxxxxxxxx>,
"Wowbagger" <none> says...
In our office environment there is an existing domain that everybody uses,
hosted on a server over which I have no control. I want to create a
separate domain on a new server for our own private workgroup complete with
a separate domain, entirely separate from the other.

Will a one-way inbound trust allow any authorized in existingdomain access
newdomain?



If the existing environment is an Active Directory
environment, I just want to caution you that setting up
a new domain/forest is not a casual decision, and should
really be thought over...

Your question is confusing though as to the trust
relationship. If you create a trust so that the new
fiefdom domain trusts the existing account domain, then
accounts from the existing account domain can be
assigned permissions or memberships in domain local
groups in the new fiefdom domain.

Again, I really do not recommend setting up a new
domain. If you do not have control of the domain, it is
probably for a corporate reason, and setting up a new
domain for bypassing this security could be a security
policy issue.

Brian
.

Relevant Pages

  • One-way inbound trusts
    ... In our office environment there is an existing domain that everybody uses, ... hosted on a server over which I have no control. ... a separate domain, ...
    (microsoft.public.windows.server.security)
  • Re: Somehow created subdomain of SBS domain
    ... I'll probably just get rid of the subdomain, ... > You may still need to describe your reasons for creating a separate Domain ... > though, sometimes a company might do that to isolate security configurations, ... Some machines may have to uninstall, maybe disable Server applications. ...
    (microsoft.public.windows.server.sbs)
  • Re: Domains & Authentication
    ... >Terminal Server is in a separate domain? ... >account objects and computer account objects reside ... user base you might ...
    (microsoft.public.win2000.active_directory)
  • Re: Domains & Authentication
    ... Terminal Server is in a separate domain? ... account objects and computer account objects reside ...
    (microsoft.public.win2000.active_directory)
  • Re: domains
    ... As long as it is in a separate domain it will not affect your existing ... You can run the two domains on the same wire with little (network ... I just want to boot this test server up on the LAN. ...
    (microsoft.public.win2000.active_directory)