Trust between domain
 




IT Certification FAQ

 
|
Home
|
Microsoft
|
CISCO
|
CompTIA
|
Exam/Study FAQ
|
Employment FAQ
| Links  | Forums  |
Book Reviews


FAQFAQ  SearchSearch  MemberlistMemberlist  UsergroupsUsergroups  RegisterRegister  ProfileProfile  Log in to check your private messagesPrivate messages  Log inLog in

Trust between domain

 
Post new topic   Reply to topic    Forum Index -> microsoft.public.windows.server.active_directory
Author Message
ckwong19802003@yahoo.com
Guest





PostPosted: Fri May 12, 2006 7:17 pm    Post subject: Trust between domain Reply with quote

hi,

Will like to ask what i should do if i have a server01 with domain1 need a
trust with a server02 with domain2.Is that during the login on the server01 i
will have the domain1 and domain2.kindly advise how to make a trust.
Back to top
Jorge de Almeida Pinto [M
Guest





PostPosted: Fri May 12, 2006 9:32 pm    Post subject: Re: Trust between domain Reply with quote

if both have w2k3 dcs and are at forest functional level windows server 2003
you can create a forest trust, otherwise you can create an external trust

the procedure to setup a trust is explained in:
for external trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/b30ef067-746e-4453-b879-804259aafdd3.mspx

for forest trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/7929b0c4-efe1-409c-99e3-efe9815f426d.mspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
<ckwong19802003@yahoo.com> wrote in message
news:392E8D20-7129-4398-838E-3EB4C629F770@microsoft.com...
Quote:
hi,

Will like to ask what i should do if i have a server01 with domain1 need a
trust with a server02 with domain2.Is that during the login on the
server01 i
will have the domain1 and domain2.kindly advise how to make a trust.
Back to top
ckwong19802003@yahoo.com
Guest





PostPosted: Sat May 13, 2006 5:25 am    Post subject: Re: Trust between domain Reply with quote

hi

Is that mean on both side of the server on the login page we will see 2
domain.Kindly advise


"Jorge de Almeida Pinto [MVP]" wrote:

Quote:
if both have w2k3 dcs and are at forest functional level windows server 2003
you can create a forest trust, otherwise you can create an external trust

the procedure to setup a trust is explained in:
for external trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/b30ef067-746e-4453-b879-804259aafdd3.mspx

for forest trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/7929b0c4-efe1-409c-99e3-efe9815f426d.mspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:392E8D20-7129-4398-838E-3EB4C629F770@microsoft.com...
hi,

Will like to ask what i should do if i have a server01 with domain1 need a
trust with a server02 with domain2.Is that during the login on the
server01 i
will have the domain1 and domain2.kindly advise how to make a trust.


Back to top
Jorge de Almeida Pinto [M
Guest





PostPosted: Sat May 13, 2006 2:10 pm    Post subject: Re: Trust between domain Reply with quote

I don't understand what you mean..

what do you want to achieve?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
<ckwong19802003@yahoo.com> wrote in message
news:151AD5AC-6457-498B-BA5A-DEDD9005D5FD@microsoft.com...
Quote:
hi

Is that mean on both side of the server on the login page we will see 2
domain.Kindly advise


"Jorge de Almeida Pinto [MVP]" wrote:

if both have w2k3 dcs and are at forest functional level windows server
2003
you can create a forest trust, otherwise you can create an external trust

the procedure to setup a trust is explained in:
for external trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/b30ef067-746e-4453-b879-804259aafdd3.mspx

for forest trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/7929b0c4-efe1-409c-99e3-efe9815f426d.mspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:392E8D20-7129-4398-838E-3EB4C629F770@microsoft.com...
hi,

Will like to ask what i should do if i have a server01 with domain1
need a
trust with a server02 with domain2.Is that during the login on the
server01 i
will have the domain1 and domain2.kindly advise how to make a trust.


Back to top
ckwong19802003@yahoo.com
Guest





PostPosted: Sat May 13, 2006 3:38 pm    Post subject: Re: Trust between domain Reply with quote

mean on the server01 during the first time it will just have the domain1 on
the login screen during the first time, is that after we do a trust we can
choose to login to which domain


"Jorge de Almeida Pinto [MVP]" wrote:

Quote:
I don't understand what you mean..

what do you want to achieve?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:151AD5AC-6457-498B-BA5A-DEDD9005D5FD@microsoft.com...
hi

Is that mean on both side of the server on the login page we will see 2
domain.Kindly advise


"Jorge de Almeida Pinto [MVP]" wrote:

if both have w2k3 dcs and are at forest functional level windows server
2003
you can create a forest trust, otherwise you can create an external trust

the procedure to setup a trust is explained in:
for external trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/b30ef067-746e-4453-b879-804259aafdd3.mspx

for forest trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/7929b0c4-efe1-409c-99e3-efe9815f426d.mspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:392E8D20-7129-4398-838E-3EB4C629F770@microsoft.com...
hi,

Will like to ask what i should do if i have a server01 with domain1
need a
trust with a server02 with domain2.Is that during the login on the
server01 i
will have the domain1 and domain2.kindly advise how to make a trust.





Back to top
Jorge de Almeida Pinto [M
Guest





PostPosted: Sat May 13, 2006 4:45 pm    Post subject: Re: Trust between domain Reply with quote

ok..

when having a single domain:
* on a server or client you will be able to logon locally or to the domain
the server/client belongs to
* on a DC you will be able to logon to the domain the DC belongs to (DCs
don't have local users)

when having multiple domains that TRUST each other:
* on a server or client you will be able to logon locally or to the domain
the server/client belongs to AND to the TRUSTED domain
* on a DC you will be able to logon to the domain the DC belongs to (DCs
don't have local users) AND to the TRUSTED domain

SO YES, your logon box will show the usual domain and the trusted domain as
soon as the trust is in place

but it also depends how you want to setup the trust... one way or two way?

an example...

DOMAIN_A and DOMAIN_B

do you want:
(1) users from DOMAIN_A to logon to clients from DOMAIN_A and DOMAIN_B?
(2) users from DOMAIN_B to logon to clients from DOMAIN_B and DOMAIN_A?
(3) both?
--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
<ckwong19802003@yahoo.com> wrote in message
news:7064B139-CBAB-451D-AFB0-773D717C943E@microsoft.com...
Quote:
mean on the server01 during the first time it will just have the domain1
on
the login screen during the first time, is that after we do a trust we can
choose to login to which domain


"Jorge de Almeida Pinto [MVP]" wrote:

I don't understand what you mean..

what do you want to achieve?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:151AD5AC-6457-498B-BA5A-DEDD9005D5FD@microsoft.com...
hi

Is that mean on both side of the server on the login page we will see 2
domain.Kindly advise


"Jorge de Almeida Pinto [MVP]" wrote:

if both have w2k3 dcs and are at forest functional level windows
server
2003
you can create a forest trust, otherwise you can create an external
trust

the procedure to setup a trust is explained in:
for external trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/b30ef067-746e-4453-b879-804259aafdd3.mspx

for forest trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/7929b0c4-efe1-409c-99e3-efe9815f426d.mspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:392E8D20-7129-4398-838E-3EB4C629F770@microsoft.com...
hi,

Will like to ask what i should do if i have a server01 with domain1
need a
trust with a server02 with domain2.Is that during the login on the
server01 i
will have the domain1 and domain2.kindly advise how to make a trust.





Back to top
ckwong19802003@yahoo.com
Guest





PostPosted: Sat May 13, 2006 5:14 pm    Post subject: Re: Trust between domain Reply with quote

hi,

If i want it to have 1 usual domain and then another trust domain on both
machine that is the dc.is this will be the 2 way trust?



"Jorge de Almeida Pinto [MVP]" wrote:

Quote:
ok..

when having a single domain:
* on a server or client you will be able to logon locally or to the domain
the server/client belongs to
* on a DC you will be able to logon to the domain the DC belongs to (DCs
don't have local users)

when having multiple domains that TRUST each other:
* on a server or client you will be able to logon locally or to the domain
the server/client belongs to AND to the TRUSTED domain
* on a DC you will be able to logon to the domain the DC belongs to (DCs
don't have local users) AND to the TRUSTED domain

SO YES, your logon box will show the usual domain and the trusted domain as
soon as the trust is in place

but it also depends how you want to setup the trust... one way or two way?

an example...

DOMAIN_A and DOMAIN_B

do you want:
(1) users from DOMAIN_A to logon to clients from DOMAIN_A and DOMAIN_B?
(2) users from DOMAIN_B to logon to clients from DOMAIN_B and DOMAIN_A?
(3) both?
--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:7064B139-CBAB-451D-AFB0-773D717C943E@microsoft.com...
mean on the server01 during the first time it will just have the domain1
on
the login screen during the first time, is that after we do a trust we can
choose to login to which domain


"Jorge de Almeida Pinto [MVP]" wrote:

I don't understand what you mean..

what do you want to achieve?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:151AD5AC-6457-498B-BA5A-DEDD9005D5FD@microsoft.com...
hi

Is that mean on both side of the server on the login page we will see 2
domain.Kindly advise


"Jorge de Almeida Pinto [MVP]" wrote:

if both have w2k3 dcs and are at forest functional level windows
server
2003
you can create a forest trust, otherwise you can create an external
trust

the procedure to setup a trust is explained in:
for external trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/b30ef067-746e-4453-b879-804259aafdd3.mspx

for forest trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/7929b0c4-efe1-409c-99e3-efe9815f426d.mspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:392E8D20-7129-4398-838E-3EB4C629F770@microsoft.com...
hi,

Will like to ask what i should do if i have a server01 with domain1
need a
trust with a server02 with domain2.Is that during the login on the
server01 i
will have the domain1 and domain2.kindly advise how to make a trust.








Back to top
Jorge de Almeida Pinto [M
Guest





PostPosted: Sat May 13, 2006 7:29 pm    Post subject: Re: Trust between domain Reply with quote

Quote:
do you want:
(1) users from DOMAIN_A to logon to clients from DOMAIN_A and DOMAIN_B?
(2) users from DOMAIN_B to logon to clients from DOMAIN_B and DOMAIN_A?
(3) both?

(3) needs a two way trust
(1) and (2) are one way trust, but the direction differs

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
<ckwong19802003@yahoo.com> wrote in message
news:56D2C6E6-84CB-409A-826E-9B0BA13E7156@microsoft.com...
Quote:
hi,

If i want it to have 1 usual domain and then another trust domain on both
machine that is the dc.is this will be the 2 way trust?



"Jorge de Almeida Pinto [MVP]" wrote:

ok..

when having a single domain:
* on a server or client you will be able to logon locally or to the
domain
the server/client belongs to
* on a DC you will be able to logon to the domain the DC belongs to (DCs
don't have local users)

when having multiple domains that TRUST each other:
* on a server or client you will be able to logon locally or to the
domain
the server/client belongs to AND to the TRUSTED domain
* on a DC you will be able to logon to the domain the DC belongs to (DCs
don't have local users) AND to the TRUSTED domain

SO YES, your logon box will show the usual domain and the trusted domain
as
soon as the trust is in place

but it also depends how you want to setup the trust... one way or two
way?

an example...

DOMAIN_A and DOMAIN_B

do you want:
(1) users from DOMAIN_A to logon to clients from DOMAIN_A and DOMAIN_B?
(2) users from DOMAIN_B to logon to clients from DOMAIN_B and DOMAIN_A?
(3) both?
--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:7064B139-CBAB-451D-AFB0-773D717C943E@microsoft.com...
mean on the server01 during the first time it will just have the
domain1
on
the login screen during the first time, is that after we do a trust we
can
choose to login to which domain


"Jorge de Almeida Pinto [MVP]" wrote:

I don't understand what you mean..

what do you want to achieve?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:151AD5AC-6457-498B-BA5A-DEDD9005D5FD@microsoft.com...
hi

Is that mean on both side of the server on the login page we will
see 2
domain.Kindly advise


"Jorge de Almeida Pinto [MVP]" wrote:

if both have w2k3 dcs and are at forest functional level windows
server
2003
you can create a forest trust, otherwise you can create an external
trust

the procedure to setup a trust is explained in:
for external trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/b30ef067-746e-4453-b879-804259aafdd3.mspx

for forest trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/7929b0c4-efe1-409c-99e3-efe9815f426d.mspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers
no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:392E8D20-7129-4398-838E-3EB4C629F770@microsoft.com...
hi,

Will like to ask what i should do if i have a server01 with
domain1
need a
trust with a server02 with domain2.Is that during the login on
the
server01 i
will have the domain1 and domain2.kindly advise how to make a
trust.








Back to top
ckwong19802003@yahoo.com
Guest





PostPosted: Sat May 13, 2006 7:46 pm    Post subject: Re: Trust between domain Reply with quote

hi,

I think i know what i should do, the thing i wan is both,thank you very much
for your information.


"Jorge de Almeida Pinto [MVP]" wrote:

Quote:
do you want:
(1) users from DOMAIN_A to logon to clients from DOMAIN_A and DOMAIN_B?
(2) users from DOMAIN_B to logon to clients from DOMAIN_B and DOMAIN_A?
(3) both?

(3) needs a two way trust
(1) and (2) are one way trust, but the direction differs

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:56D2C6E6-84CB-409A-826E-9B0BA13E7156@microsoft.com...
hi,

If i want it to have 1 usual domain and then another trust domain on both
machine that is the dc.is this will be the 2 way trust?



"Jorge de Almeida Pinto [MVP]" wrote:

ok..

when having a single domain:
* on a server or client you will be able to logon locally or to the
domain
the server/client belongs to
* on a DC you will be able to logon to the domain the DC belongs to (DCs
don't have local users)

when having multiple domains that TRUST each other:
* on a server or client you will be able to logon locally or to the
domain
the server/client belongs to AND to the TRUSTED domain
* on a DC you will be able to logon to the domain the DC belongs to (DCs
don't have local users) AND to the TRUSTED domain

SO YES, your logon box will show the usual domain and the trusted domain
as
soon as the trust is in place

but it also depends how you want to setup the trust... one way or two
way?

an example...

DOMAIN_A and DOMAIN_B

do you want:
(1) users from DOMAIN_A to logon to clients from DOMAIN_A and DOMAIN_B?
(2) users from DOMAIN_B to logon to clients from DOMAIN_B and DOMAIN_A?
(3) both?
--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:7064B139-CBAB-451D-AFB0-773D717C943E@microsoft.com...
mean on the server01 during the first time it will just have the
domain1
on
the login screen during the first time, is that after we do a trust we
can
choose to login to which domain


"Jorge de Almeida Pinto [MVP]" wrote:

I don't understand what you mean..

what do you want to achieve?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:151AD5AC-6457-498B-BA5A-DEDD9005D5FD@microsoft.com...
hi

Is that mean on both side of the server on the login page we will
see 2
domain.Kindly advise


"Jorge de Almeida Pinto [MVP]" wrote:

if both have w2k3 dcs and are at forest functional level windows
server
2003
you can create a forest trust, otherwise you can create an external
trust

the procedure to setup a trust is explained in:
for external trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/b30ef067-746e-4453-b879-804259aafdd3.mspx

for forest trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/7929b0c4-efe1-409c-99e3-efe9815f426d.mspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers
no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:392E8D20-7129-4398-838E-3EB4C629F770@microsoft.com...
hi,

Will like to ask what i should do if i have a server01 with
domain1
need a
trust with a server02 with domain2.Is that during the login on
the
server01 i
will have the domain1 and domain2.kindly advise how to make a
trust.











Back to top
ckwong19802003@yahoo.com
Guest





PostPosted: Wed May 17, 2006 11:50 am    Post subject: Re: Trust between domain Reply with quote

hi

if the user from domain-A need to login to domainA and DomainB,I should
setup a oneway trust on which domain controller, is that on the
domainA?Kindly advise

"Jorge de Almeida Pinto [MVP]" wrote:

Quote:
do you want:
(1) users from DOMAIN_A to logon to clients from DOMAIN_A and DOMAIN_B?
(2) users from DOMAIN_B to logon to clients from DOMAIN_B and DOMAIN_A?
(3) both?

(3) needs a two way trust
(1) and (2) are one way trust, but the direction differs

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:56D2C6E6-84CB-409A-826E-9B0BA13E7156@microsoft.com...
hi,

If i want it to have 1 usual domain and then another trust domain on both
machine that is the dc.is this will be the 2 way trust?



"Jorge de Almeida Pinto [MVP]" wrote:

ok..

when having a single domain:
* on a server or client you will be able to logon locally or to the
domain
the server/client belongs to
* on a DC you will be able to logon to the domain the DC belongs to (DCs
don't have local users)

when having multiple domains that TRUST each other:
* on a server or client you will be able to logon locally or to the
domain
the server/client belongs to AND to the TRUSTED domain
* on a DC you will be able to logon to the domain the DC belongs to (DCs
don't have local users) AND to the TRUSTED domain

SO YES, your logon box will show the usual domain and the trusted domain
as
soon as the trust is in place

but it also depends how you want to setup the trust... one way or two
way?

an example...

DOMAIN_A and DOMAIN_B

do you want:
(1) users from DOMAIN_A to logon to clients from DOMAIN_A and DOMAIN_B?
(2) users from DOMAIN_B to logon to clients from DOMAIN_B and DOMAIN_A?
(3) both?
--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:7064B139-CBAB-451D-AFB0-773D717C943E@microsoft.com...
mean on the server01 during the first time it will just have the
domain1
on
the login screen during the first time, is that after we do a trust we
can
choose to login to which domain


"Jorge de Almeida Pinto [MVP]" wrote:

I don't understand what you mean..

what do you want to achieve?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:151AD5AC-6457-498B-BA5A-DEDD9005D5FD@microsoft.com...
hi

Is that mean on both side of the server on the login page we will
see 2
domain.Kindly advise


"Jorge de Almeida Pinto [MVP]" wrote:

if both have w2k3 dcs and are at forest functional level windows
server
2003
you can create a forest trust, otherwise you can create an external
trust

the procedure to setup a trust is explained in:
for external trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/b30ef067-746e-4453-b879-804259aafdd3.mspx

for forest trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/7929b0c4-efe1-409c-99e3-efe9815f426d.mspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers
no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:392E8D20-7129-4398-838E-3EB4C629F770@microsoft.com...
hi,

Will like to ask what i should do if i have a server01 with
domain1
need a
trust with a server02 with domain2.Is that during the login on
the
server01 i
will have the domain1 and domain2.kindly advise how to make a
trust.











Back to top
ckwong19802003@yahoo.com
Guest





PostPosted: Thu May 18, 2006 11:45 am    Post subject: Re: Trust between domain Reply with quote

hi

if the user from domain-A need to login to domainA and DomainB,I should
setup a oneway trust on which domain controller, is that on the
domainA?Kindly advise



"Jorge de Almeida Pinto [MVP]" wrote:

Quote:
do you want:
(1) users from DOMAIN_A to logon to clients from DOMAIN_A and DOMAIN_B?
(2) users from DOMAIN_B to logon to clients from DOMAIN_B and DOMAIN_A?
(3) both?

(3) needs a two way trust
(1) and (2) are one way trust, but the direction differs

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:56D2C6E6-84CB-409A-826E-9B0BA13E7156@microsoft.com...
hi,

If i want it to have 1 usual domain and then another trust domain on both
machine that is the dc.is this will be the 2 way trust?



"Jorge de Almeida Pinto [MVP]" wrote:

ok..

when having a single domain:
* on a server or client you will be able to logon locally or to the
domain
the server/client belongs to
* on a DC you will be able to logon to the domain the DC belongs to (DCs
don't have local users)

when having multiple domains that TRUST each other:
* on a server or client you will be able to logon locally or to the
domain
the server/client belongs to AND to the TRUSTED domain
* on a DC you will be able to logon to the domain the DC belongs to (DCs
don't have local users) AND to the TRUSTED domain

SO YES, your logon box will show the usual domain and the trusted domain
as
soon as the trust is in place

but it also depends how you want to setup the trust... one way or two
way?

an example...

DOMAIN_A and DOMAIN_B

do you want:
(1) users from DOMAIN_A to logon to clients from DOMAIN_A and DOMAIN_B?
(2) users from DOMAIN_B to logon to clients from DOMAIN_B and DOMAIN_A?
(3) both?
--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:7064B139-CBAB-451D-AFB0-773D717C943E@microsoft.com...
mean on the server01 during the first time it will just have the
domain1
on
the login screen during the first time, is that after we do a trust we
can
choose to login to which domain


"Jorge de Almeida Pinto [MVP]" wrote:

I don't understand what you mean..

what do you want to achieve?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:151AD5AC-6457-498B-BA5A-DEDD9005D5FD@microsoft.com...
hi

Is that mean on both side of the server on the login page we will
see 2
domain.Kindly advise


"Jorge de Almeida Pinto [MVP]" wrote:

if both have w2k3 dcs and are at forest functional level windows
server
2003
you can create a forest trust, otherwise you can create an external
trust

the procedure to setup a trust is explained in:
for external trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/b30ef067-746e-4453-b879-804259aafdd3.mspx

for forest trust
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/7929b0c4-efe1-409c-99e3-efe9815f426d.mspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers
no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
ckwong19802003@yahoo.com> wrote in message
news:392E8D20-7129-4398-838E-3EB4C629F770@microsoft.com...
hi,

Will like to ask what i should do if i have a server01 with
domain1
need a
trust with a server02 with domain2.Is that during the login on
the
server01 i
will have the domain1 and domain2.kindly advise how to make a
trust.











Back to top
Display posts from previous:   
Post new topic   Reply to topic    Forum Index -> microsoft.public.windows.server.active_directory All times are GMT
Page 1 of 1

 

Copyright © 2002-2006 Web-S-Sense Pty. Ltd. All rights reserved.

Powered by phpBB
Advertising | Policies/Disclaimers | Contact us | Link to us


Featured Sites: Free Antivirus and Antispyware Info | Free PC Support | MCSE Directory