Powered by Blogger.

Tuesday, 12 November 2013

In the Active Directory of big improvement over its predecessor in NT4 in which the AD is one of trust relationships in a multi-domain environment.
In Windows 2000 and in Windows Server 2003 Active Directory, you have enabled, by default, automatically creates certain trust relationships: parent and create it, and multiple domain trees in a forest root domain two-way transitive trust between the bottom of the two-way transitive trust relationships between all domains. Two-way trust relationship means users in domain a can access resources in domain b uses the same trust relationships, allowing users to access a domain b. resources in the domain that has greatly simplified compared to NT4, you need to create and manage a separate trust relationships (one-way trust) in each direction if you need to configure access the trust of both sides. Transitive trust relationship means that if domain a trusts domain b, and domain b trusts domain c, then an implicit trust relationship between domain a and domain c automatically; there is no need to manually create a third trust relationships. Therefore, if the Active Directory domain has many subdomains, all those subdomains are implicit trust relationships, because they all have a trust relationship with that single parent domain. Similarly, contains multiple domain trees in the forest, each all subdomains of the domain tree can access resources in the other tree by default, each domain tree's root domain trusts between the transitive nature.

NT4 large improvements over its predecessors in Active Directory in which the AD is one of managing trust relationships in a multi-domain environment.
In Windows 2000 and in Windows Server 2003 Active Directory, you have enabled, by default, automatically creates a trust relationship: parent and create it, and multiple domain trees in a forest bottom two-way transitive trust between the root domains of all two-way, transitive trust relationships between the child domain. Two-way trust relationship means users in domain a can access resources in domain b, using the same trust relationships, allowing users to access a domain b. resources in the domain that greatly simplifies matters compared to NT4, you need to create and manage a separate trust relationships (one-way) in each direction if you need to configure access to confidence on both sides. Transitive trust relationship means that if domain a trusts domain b, and domain b trusts domain c, then an implicit trust relationship between domain a and domain c automatically; there is no need to manually create a third trust relationships. Therefore, if the Active Directory domain has many subdomains, all those subdomains are implicit trust relationships, because they all have a trust relationship with that single parent domain. Similarly, contains multiple domain trees in the forest, each all subdomains of the domain tree can access resources in the other tree by default, each domain tree's root domain trusts between the transitive nature.

This is by introducing improved on Windows Server 2003 cross-forest trusts. The advanced features of Active Directory is available, if the forest is at the Windows Server 2003 forest functional level, this means that on those two all the domain controllers in all domains in the forest are running Windows Server 2003, you manually change to the new forest functional level. Across forest trust is can passed of this meant with in forest a, in the of each domain will and each domain in the forest b. has implicit type trust relationship this what passed sexual does not meant with for across Directory forest trust (and causes this often confusion) is: If you has across Directory forest trust relationship forest a, and forest b and forest b and forest c of second times across Directory forest trust, forest a, and forest c not exists trust relationship you will needs created second a across Directory forest trust relationship forest a, and forest c allows such occurred. Cross-forest trusts can be one-way or two-way, and you will build trust between the forest root domain for each forest.

0 comments:

Post a Comment