Home All Groups Group Topic Archive Search About
Author
10 Mar 2006 7:06 AM
itcom
Hello

I have a local domain controller in toronto locally. I have to allow NEw
york user to logon. New york got another domain controller. I need to allow
the new york users using their new york domain user name and password to
logon toronto domain server. but my local domain users should not be able to
log on to New York domain.

I believe it is called one way trust.
Question :
Any step by step doc regarding how to setup one way trust?

Regards
--
it com

Author
10 Mar 2006 7:53 AM
Paul Williams [MVP]
The help is your best bet.  In your local domain, fire up domain.msc and
choose trusts.  Then hit help.  There will be instructions in here for the
specifics.  Basically you need to configure your domain to trust the NetBIOS
name of the New York domain.  The admins over in New York will then need to
configure their domain so that it knows it is trusted by your domain in
Toronto.

Before you can get this working you need to be able to resolve their PDCe.
Which means either a stub zone, a conditional forwarder, a secondary zone or
WINS (or LMHOSTS, but don't do it that way).

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net