hi all
Domains by default are unable to communicate with other domains, which means somewhere in domain LAB1 cannot access any resource that is part of domain LAB2. Before a trust relationship is configured
(A) an administrator in LAB1 cannot give permission to any user of domain LAB2 for files or printers
(B) a user of domain LAB2 cannot sit at a workstation that is part of domain LAB1 and login
After a trust relationship is defined, say LAB1 trusts LAB2 the following happens
(A)users of domain LAB2 can sit at a workstation that is part of domain LAB1 and login to their own domain LAB2 (it will be displayed in the domain dropdown box)
(B)an administrator of domain LAB1 can grant permission to any user of domain LAB2 to file and print resources
(C)users of domain LAB2 are included in the Everyone group of domain LAB1
In the example above LAB1 is the trusting domain, and LAB2 is the trusted domain. Also the above is a one-way trust relationship, i.e. while domain LAB2 users can use domain LAB1 resources, users of domain LAB1 cannot use domain LAB2 resources. A two-way relationship would allow each domain to access resources of the other (if given permission).
The basics of a trust relationship is to first configure domain LAB2 to allow domain LAB1 to trust it, and then configure domain LAB1 to trust domain LAB2:
(1)Log onto domain LAB2 as Administrator
(2)Start Active Directory Domains & Trusts for Domains (Start - Programs - Administrative Tools)
(3)Select "the properties" of the LAB2 domain then "Trust Tab"
(4)Click the Add button to " the domains that trust this domain" box
(5)Enter the name of the domain you want to be able to trust you, i.e. domain LAB1
(6)You can type a password in the Initial Password and Confirm Password, however this is only used when the trust relationship is started. You can leave it blank Click OK to complete the addition
(7)Close the Trust Relationship dialog box
(8)Log off of domain LAB2 and login onto domain LAB1 as Administrator
(9)start Active Directory Domains & Trusts for Domains (Start - Programs - Administrative Tools)
(10)Select "the properties" of the LAB1 domain then "Trust" tab
(11)Click the Add button to " the domains trusted by this domain" box
(12)Enter the name of domain LAB2 and the password if one was configured in step 6
(13)Click OK and close.
(14)Domain LAB1 now trusts domain LAB2
