When To Create A Realm Trust

By Author: fiona
Total Articles: 190
Comment this article

A realm trust can be established between any non-Windows Kerberos version 5 realm 70-270 practice test and a Windows Server 2003 domain to allow cross-platform interoperability with security services based on other Kerberos version 5 implementations, such as UNIX or MIT. Realm trusts can be switched from nontransitive to transitive and back and can be either one- or two-way.
Requirements To create a realm trust, you must have Enterprise Admin or Domain Admin privileges for the domain in the Windows Server 2003 forest and the appropriate administrative privileges in the target Kerberos realm.
When to Create an External an Trust
You can create an external trust to form a one- or two-way nontransitive relationship with domains outside of your forest. External trusts are sometimes necessary when users need access to resources located in a Windows NT 4 domain or in a domain located within a separate forest that is not joined by a forest trust.
When a trust is established between a domain in a forest and a domain outside of that forest, security principals from the external ...
... domain can access resources in the internal domain. Active Directory creates a foreign security principal object in the internal domain to represent each security principal from the trusted external domain. These foreign security principals can become MCP certification members of domain local groups in the internal domain. You can view foreign security principals in the Active Directory Users And Computers console when Advanced Features are enabled. To enable Advanced Features, select Advanced Features from the View menu on the Active Directory Users And Computers console.

Explicitly created by a systems administrator between two domains in a forest to improve user logon times. This is useful when two domains are separated by two domain trees. The trust is transitive and can be one- or two-way. A shortcut trust may also be referred to as a cross-link trust.
Explicitly created by a systems administrator between a non-Windows Kerberos realm and a Windows Server 2003 domain. This trust provides
interoperability between Windows Server 2003 and any realm used in Kerberos version 5 implementations. It can be transitive or nontransitive and one- or two-way.
Explicitly created by a systems administrator between two forest root domains. If a forest trust is two-way, it effectively allows all authentication
requests made from one free practice questions forest to reach another. The trust is transitive between two forests only and can be one- or two-way.