4.3 - Trusts
Last updated
Last updated
A trust is a relationship between two domains or forests that allows users from one domain or forest to access resources in another. Trusts can be either automatic (such as parent-child trusts within the same forest) or manually established (such as external or forest trusts).
Trusted Domain Objects (TDOs) are used to represent these trust relationships within a domain.
One-Way Trust: A unidirectional relationship where users in the trusted domain can access resources in the trusting domain, but not the other way around.
Two-Way Trust: A bidirectional relationship where users from both domains can access resources in each other's domains.
Transitive Trusts: These can be extended to establish trust with additional domains. All default intra-forest trusts (such as tree-root and parent-child) are two-way transitive trusts.
Non-Transitive Trusts: These trusts cannot be extended to other domains. They can either be one-way or two-way. Non-transitive trusts are typically created between two domains in different forests (known as external trusts).
Parent-Child Trust:
Created automatically when a new domain is added under an existing domain in the namespace hierarchy.
Example: dollarcorp.moneycorp.local is a child domain of moneycorp.local.
Always two-way and transitive.
Tree-Root Trust: Created automatically when a new domain tree is added to a forest. Always two-way and transitive.
Established between two domains in different forests when the forests themselves do not have a trust relationship.
Can be one-way or two-way.
Always non-transitive.
Created between the root domains of two forests.
Cannot be automatically extended to additional forests (i.e., no implicit transitive trust with a third forest).
Can be either one-way or two-way, and are transitive within the connected forests.
To enumerate domain trusts:
To map information about the forest:
Retrieve all domains in the current forest:
Retrieve all global catalogs for the forest:
Map forest trust relationships (if any exist):
Refers to lab
