Configuring Interforest Trusts

As an alternative to performing a domain restructure, you can use interforest trusts, or forest trusts, from one Windows Server 2008 forest in order to access resources in another disjoined Windows Server 2008 forest.

One of the significant enhancements that occurred in Windows Server 2003 Active Directory was the option to create trusts between AD DS forests. In Windows 2000 Active Directory, you can only create a trust between a single domain in one forest and a single domain in another forest. In Windows Server 2003 and Windows Server 2008, you can configure a trust between the forest root domains. This trust can be a one-way or a two-way trust. After the trust is created, you can use global groups or universal ...

Get Windows Server® 2008 Active Directory® Resource Kit now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.