Active Directory® Administrator's Pocket Consultant

Configuring Selective Authentication

Creating an external trust or forest trust provides a pathway for all authentication requests between domains and forests. For an external trust, the domainwide authentication setting permits unrestricted access by any users in the trusted domain to all available shared resources in the trusting domain. For a forest trust, the forestwide authentication setting permits unrestricted access by any users in the trusted forest to all available shared resources in any of the domains in the trusting forest.

To enact controls over how authentication can be used between forests, you can use selective authentication. Selective authentication allows administrators to control which groups of users in a trusted domain or ...