trust type question

[Darren]

Hi, All
I am trying to grasp the concept on the various trust type and usage..
Are the following questions correct..
a) Are all forest trust transitive? and can be used when all domains in one
forest need access all domains in another forest .Should forest trust be
created at the root forest domains as a result they are transitive ?
b) Are external trust non- transitive ? what are the diffrences between
external trust and short-cut trust are they the same ?
c) Where are incoming trust created ? Is it at the trusted domain . In
addtion, is this a 2 step process do I need to create an out going trust at
the trusting domain assuming I need to have users in the trusted domain
access resources in the trusting domain.

Thanks inadvance for your help
Darren

 

[Darren]

just checking for a response.. anyone ?
Thanks!

 

[Steven L Umbach]

Forest trusts can be one way or two way. When there is a forest trust than
all domains in that forest are part of the trust. In other words if forest A
trusts forest B then it trusts all domains in forest B. If that is not
acceptable you can use externals trusts to particular domains or consider
using "selective"authentication with the allowed to authenticate permission
or possibly domain name filtering. Forests trusts are done between the root
domains of each forest. The links below explain a lot more. You can create
a trust from either domain/forest as long as you know domain or enterprise
admins credentials for each forest/domain. --- Steve

http://www.microsoft.com/technet/pr...Ref/3215e730-c1a7-4918-bc9e-67f343f89e61.mspx
http://www.microsoft.com/technet/pr...Ref/9d688a18-15c7-4d4e-9d34-7a763baa50a1.mspx
http://www.microsoft.com/technet/pr...ons/9266b197-7fc9-4bd8-8864-4c119ceecc00.mspx
http://www.microsoft.com/technet/pr...elp/7929b0c4-efe1-409c-99e3-efe9815f426d.mspx