.png?width=100&auto=webp&quality=80&disable=upscale "Picture of John Savill")
.png?width=400&auto=webp&quality=80&disable=upscale "John Savill")
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
How do I configure a Trust Relationship?
John Savill
January 8, 2000
2 Min Read
A. Domains by default are unable to communicate withother domains, which means somewhere in domain x cannotaccess any resource that is part of domain y. Before atrust relationship is configured
an administrator in x cannot give permission to any user of domain y for files or printers
a user of domain y cannot sit at a workstation that is part of domain x and logon
After a trust relationship is defined, say x trustsy the following happens
users of domain y can sit at a workstation that is part of domain x and logon to their own domain y (it will be displayed in the domain dropdown box)
an administrator of domain x can grant permission to any user of domain y to file and print resources
users of domain y are included in the Everyone group of domain x
In the example above x is the trusting domain,and y is the trusted domain. Also the above isa one-way trust relationship, i.e. while domain y userscan use domain x resources, users of domain xcannot use domain y resources. A two-way relationshipwould allow each domain to access resources of the other (if givenpermission).
The basics of a trust relationship is to first configure domainy to allow domain x to trust it, andthen configure domain x to trust domain y:
Log onto domain y as Administrator
Start User Manager for Domains (Start - Programs - Administrative Tools)
Select "Trust Relationships" from the Policies menu
Click the Add button to the Trusting Domains box
Enter the name of the domain you want to be able to trust you, i.e. domain x
You can type a password in the Initial Password and Confirm Password, however this is only used when the trust relationship is started. You can leave it blank Click OK to complete the addition
Close the Trust Relationship dialog box
Log off of domain y and logon onto domain x as Administrator
Start User Manger for Domains, and choose "Trust Relationships" from the Policies menu
Click the Add button to the Trusted Domains box
Enter the name of domain y and the password if one was configured in step 6
Click OK and close the User Manager for Domains application.
Domain x now trusts domain y
See also, "Identifying Trust-Relationship Changes" and "Q: What is an Active Directory (AD) shortcut trust relationship, and what effect does it have on Kerberos authentication traffic?"
About the Author
You May Also Like
.jpg?width=700&auto=webp&quality=80&disable=upscale)
