O'Reilly logo

Special Edition Using Microsoft Active Directory by James Hudson, Sean Fullerton

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Shortcut Trusts

As was demonstrated in the previous section, to use services in another domain, the client is referred up the tree by the KDC until it reaches a point at which the referral process can run down the tree to the desired domain. If you have one domain that often uses resources in another domain, it might be worth the management overhead to create a shortcut trust. In this demonstration, you will create a shortcut trust between the sales and mfg domains to shorten the Kerberos referral path. Then, you'll look at the process of a client in sales accessing a server in mfg to see how much shorter the Kerberos path is.

Creating a Shortcut Trust

To create a shortcut trust, load the Active Directory Domains and Trusts MMC Snap-in and select ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required