Special Edition Using Microsoft Active Directory

Shortcut Trusts

As was demonstrated in the previous section, to use services in another domain, the client is referred up the tree by the KDC until it reaches a point at which the referral process can run down the tree to the desired domain. If you have one domain that often uses resources in another domain, it might be worth the management overhead to create a shortcut trust. In this demonstration, you will create a shortcut trust between the sales and mfg domains to shorten the Kerberos referral path. Then, you'll look at the process of a client in sales accessing a server in mfg to see how much shorter the Kerberos path is.

Creating a Shortcut Trust

To create a shortcut trust, load the Active Directory Domains and Trusts MMC Snap-in and select ...