Windows Forum

Ask something
Discussion Locked

NT Trusts

0 helpful
6 replies

by rbarton

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I am working on a project to establish a 2 way trust through a public network. We're using WIN NT 4 SP-6 boxes. The routing is clear. What do we need to consider in our installation? The trust currently fails.

6 replies

by astute

Domains by default are unable to communicate with other domains, which means somewhere in domain x cannot access any resource that is part of domain y. Before a trust relationship is configured

an administrator in x cannot give permission to anyuser of domain y for files or printers
a user of domain y cannot sit at a workstation that is part of domain x and logon
After a trust relationship is defined, say x trusts y the following happens

users of domain y can sit at a workstation that is part of domain x and logon to their own domain y (it will be displayed in the domain dropdown box)
an administrator of domain x can grant permission to any user of domain y to file and print resources
users of domain y are included in the Everyone group of domain x
In the example above x is the trusting domain, and y is the trusted domain. Also the above is a one-way trust relationship, i.e. while domain y users can use domain x resources, users of domain x cannot use domain y resources. A two-way relationship would allow each domain to access resources of the other (if given permission).

The basics of a trust relationship is to first configure domain y to allow domain x to trust it, and then configure domain x to trust domain y:

Log onto domain y as Administrator
Start User Manager for Domains (Start - Programs - Administrative Tools)
Select "Trust Relationships" from the Policies menu
Click the Add button to the Trusting Domains box
Enter the name of the domain you want to be able to trust you, i.e. domain x
You can type a password in the Initial Password and Confirm Password, however this is only used when the trust relationship is started. You can leave it blank Click OK to complete the additionClose the Trust Relationship dialog box
Log off of domain y and logon onto domain x as Administrator

by astute

Start User Manger for Domains, and choose "Trust Relationships" from the Policies menu
Click the Add button to the Trusted Domains box
Enter the name of domain y and the password if one was configured in step 6
Click OK and close the User Manager for Domains application.
Domain x now trusts domain y

by rbarton

We know that, I'm looking for why the trust would fail over a public network.

by joshg

Here's what I can tell you, There are no two way trust in NT. Only TWO-ONEWAY trusts. Anyhow make sure that you have the two Domain controllers' IP addresses and NETBIOS names in either WINS or LMHOSTS before trying to establish the trust. Then set each domain as "TRUSTING" one another. Then set the "TRUSTED" one at a time. I think the important thing here is the IP to host name resolution. The trust will fail if the Domains cannot find the other controllers.

This discussion is closed to new replies.