Domain Structure Showing Tree-root And Parent-child Trusts

By Author: crystal clinton
Total Articles: 129
Comment this article

A shortcut trust must be explicitly created by a become mcitp systems administrator between two domains in a forest. This trust is used to improve user logon times, which can be slow when two domains are logically distant from each other in a forest or tree hierarchy. The trust is transitive and can be one-way or two-way.
An external trust must be explicitly created by a systems administrator between Windows Server 2003 domains that are in different forests, or between a Windows Server 2003 domain and a domain whose domain controller is running Windows NT 4 or earlier. This trust is used when users need access to
resources located in a Windows NT 4 domain or in a domain located within a separate forest, which cannot be joined by a forest trust. The trust is nontransitive and can be one- or two-way.
A forest trust must be explicitly created by a systems administrator between two forest root domains. This trust allows all domains in one forest to
transitively trust all domains in another forest. A forest trust is not transitive across three or more forests. For ...
... example, forest A trusts forest B and forest B trusts forest C. There is no trust relationship between forest A and forest C. The trust is online MCITP certification transitive between two forests only and can be one-way or two-way. Forest trusts are only available when the forest is at the Windows Server 2003 functional level.
A realm trust must be explicitly created by a systems administrator between a non-Windows Kerberos realm and a Window's Server 2003 domain.
This trust provides interoperability between the Windows Server 2003 domain and any realm used in Kerberos version 5 implementations. The trust can be transitive or nontransitive and one-way or two-way.
As an administrator, you must plan trust relationships to provide users with the access to resources they require. See Chapter 4, "Installing and Managing Domains, Trees, and Forests," for details about planning trust relationships.
A Windows-based directory service. Active Directory stores information about objects on a network and makes this information usable to users and network administrators. Active Directory gives network users access to permitted resources anywhere on the network using a single logon process. It provides network administrators with an intuitive, hierarchical view of the free CompTIA exam questions network and a single point of administration for all network objects.