pass-through authentication

[Ro]

Can anyone provide reasons why pass-through authentication between a windows
2003 domain and NT4 domain won't work.

Regards,
Ro.

 

[S.J.Haribabu]

Hi,

Windows 2000 has implicit trust relationships with a
domain tree, and between trees in a forest, are transitive and
bi-directional by default, the single sign-on provides access not
only to the entire domain, but to all domains in the Windows 2000
forest. When a user has been authenticated to one domain in a
forest, referral or pass-through authentication provides access
to resources on computers that reside in other domains within the
forest.

But windows NT domains on your network, trust
relationships are not implicit; they must be created by the
administrator. Additionally, they are one-way and non-transitive
so you must create two explicit trusts between each pair of NT
domains – or NT domain and Windows 2000 domain – in order to
enjoy pass-through authentication throughout the network.

Thanks,
(e-mail address removed)

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Ro]

Thanks.

I actually posted the wrong question, in haste.
Should have asked about untrusted domains.