trust type question

Archived from groups: microsoft.public.win2000.security (More info?)

just checking for a response.. anyone ?
Thanks!
"Darren" <Darren@somewhere.com.(donotspam)> wrote in message
news:e00KDfvrFHA.1132@TK2MSFTNGP10.phx.gbl...
> Hi, All
> I am trying to grasp the concept on the various trust type and usage..
> Are the following questions correct..
> a) Are all forest trust transitive? and can be used when all domains in
> one forest need access all domains in another forest .Should forest trust
> be created at the root forest domains as a result they are transitive ?
> b) Are external trust non- transitive ? what are the diffrences between
> external trust and short-cut trust are they the same ?
> c) Where are incoming trust created ? Is it at the trusted domain . In
> addtion, is this a 2 step process do I need to create an out going trust
> at the trusting domain assuming I need to have users in the trusted domain
> access resources in the trusting domain.
>
> Thanks inadvance for your help
> Darren
>

Archived from groups: microsoft.public.win2000.security (More info?)

Forest trusts can be one way or two way. When there is a forest trust than
all domains in that forest are part of the trust. In other words if forest A
trusts forest B then it trusts all domains in forest B. If that is not
acceptable you can use externals trusts to particular domains or consider
using "selective"authentication with the allowed to authenticate permission
or possibly domain name filtering. Forests trusts are done between the root
domains of each forest. The links below explain a lot more. You can create
a trust from either domain/forest as long as you know domain or enterprise
admins credentials for each forest/domain. --- Steve

http://www.microsoft.com/technet/prodtechnol/windowsser...
http://www.microsoft.com/technet/prodtechnol/windowsser...
http://www.microsoft.com/technet/prodtechnol/windowsser...
http://www.microsoft.com/technet/prodtechnol/windowsser...


"Darren" <Darren@somewhere.com.(donotspam)> wrote in message
news 0%23cXl6sFHA.1472@TK2MSFTNGP15.phx.gbl...
> just checking for a response.. anyone ?
> Thanks!
> "Darren" <Darren@somewhere.com.(donotspam)> wrote in message
> news:e00KDfvrFHA.1132@TK2MSFTNGP10.phx.gbl...
>> Hi, All
>> I am trying to grasp the concept on the various trust type and usage..
>> Are the following questions correct..
>> a) Are all forest trust transitive? and can be used when all domains in
>> one forest need access all domains in another forest .Should forest trust
>> be created at the root forest domains as a result they are transitive ?
>> b) Are external trust non- transitive ? what are the diffrences between
>> external trust and short-cut trust are they the same ?
>> c) Where are incoming trust created ? Is it at the trusted domain . In
>> addtion, is this a 2 step process do I need to create an out going trust
>> at the trusting domain assuming I need to have users in the trusted
>> domain access resources in the trusting domain.
>>
>> Thanks inadvance for your help
>> Darren
>>
>
>