Technet states "the direction that a trust is assigned determines the trust path used for authentication".
<http://www.theitcareer.com/site/wp-content/uploads/2010/01/trust-oneway .jpg> Just as a followup, since it says Incoming on the Active Directory Domains and trusts for the for the USA domain, which I assume is USA is trusting my domain, then USA domain is the trusting (Resource) domain and my domain is the trusted domain. Which means I could access resources in the USA domain that was granted to by USA admins, but not the vice-versa. EZ Edward E. Ziots CISSP, Network +, Security + Security Engineer Lifespan Organization Email:[email protected] Cell:401-639-3505 From: Ziots, Edward [mailto:[email protected]] Sent: Tuesday, July 12, 2011 11:16 AM To: NT System Admin Issues Subject: Quick question on Domain Trusts Got a Windows 2008 R2 DFL/FFL domain. And trying to figure out a trust relationship and what could access what. ( Its been years since I dealt with trusts and what accesses what, so forgive me) I have my accounts domain, which also has my resources, then we have an external trust to a domain called USA ( Says Domains that trust this domain) (Incoming Trust) in Active Directory Domains and Trusts, so if I got this straight then my domain can access resources in the USA domain, or the other way around? Any help on sorting this one out. Z Edward E. Ziots CISSP, Network +, Security + Security Engineer Lifespan Organization Email:[email protected] Cell:401-639-3505 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
<<image001.jpg>>
<<image003.jpg>>
<<image004.jpg>>
