Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Trust between 2 2k3 domains in separate forests
Trust between 2 2k3 domains in separate forests [message #161581] Thu, 01 October 2009 12:57 Go to next message
Dean  is currently offline Dean
Messages: 25
Registered: July 2009
Junior Member
Hello,

I am trying to find the best way to go about establishing trusts between 2
2k3 domains in separate forests? I have read that 2 one-way nontransitive
trust would work but I'm not sure. What I am trying to acccomplish is to get
the two domains to share GAL info between each other.

TIA,
Dean
Re: Trust between 2 2k3 domains in separate forests [message #161585 is a reply to message #161581] Thu, 01 October 2009 16:15 Go to previous messageGo to next message
Marcin  is currently offline Marcin  United States
Messages: 273
Registered: July 2009
Senior Member
Dean,
to create a trust between two domains/forests follow:
- forest trust (between two forests)
http://technet.microsoft.com/en-us/library/cc756852(WS.10).aspx
- external trust (between two domains)
http://technet.microsoft.com/en-us/library/cc728307(WS.10).aspx

Unfortunately GAL synchronization across forests is a bit more complex .One
possibility is described at
http://technet.microsoft.com/en-us/library/bb123590(EXCHG.65).aspx - but its
applicability in your scenario would depend on your budget...

hth
Marcin

"Dean" <Dean@discussions.microsoft.com> wrote in message
news:C3771E07-EF5A-45A8-8B0E-2B016101AE0B@microsoft.com...
> Hello,
>
> I am trying to find the best way to go about establishing trusts between 2
> 2k3 domains in separate forests? I have read that 2 one-way nontransitive
> trust would work but I'm not sure. What I am trying to acccomplish is to
> get
> the two domains to share GAL info between each other.
>
> TIA,
> Dean
Re: Trust between 2 2k3 domains in separate forests [message #161588 is a reply to message #161585] Thu, 01 October 2009 20:48 Go to previous message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Marcin" <marcin@community.nospam> wrote in message
news:OnTXJTuQKHA.1232@TK2MSFTNGP05.phx.gbl...
> Dean,
> to create a trust between two domains/forests follow:
> - forest trust (between two forests)
> http://technet.microsoft.com/en-us/library/cc756852(WS.10).aspx
> - external trust (between two domains)
> http://technet.microsoft.com/en-us/library/cc728307(WS.10).aspx
>
> Unfortunately GAL synchronization across forests is a bit more complex
> .One possibility is described at
> http://technet.microsoft.com/en-us/library/bb123590(EXCHG.65).aspx - but
> its applicability in your scenario would depend on your budget...
>
> hth
> Marcin


Just to add, another weaker, but less expensive solution, is to create
contacts in Forest1 for Forest2 accounts, and vice-versa. Not the best
thing, but a way the two can communicate, however just as there are
limtations using MIIS, the limitations are greater. Basically each forest
are still separate entities.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCTS 2008, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA
Messaging
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.
Previous Topic:Large Data Extract
Next Topic:Scripting from Access to manage user's resources
Goto Forum:
  


Current Time: Sat Jan 20 08:29:38 MST 2018

Total time taken to generate the page: 0.02366 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software