Question on transitive trust

Posted on 2004-11-23
Last Modified: 2010-04-13
Transitive trust exists when all domain controllers share the same root. Or when you choose to add your domain controller to be part of the existing forest (when you first set up AD)

Now the questions.

Say I have a domain called ""    with users  Bob, Sally and Tom
I have a child called ""   with users  Ryan, Matt and Dan

1. Do changes replicate in between the 2 domains? Or are they considered seperate?
2. Can Ryan , from the domain, log into the domain?
3.  Can Bob , from the domain, log into the domain?

Question by:dissolved
    LVL 11

    Expert Comment

    1.  If you are making changes to user accounts, then it's separate.  A global catalog will make a not of most changes so that if it is need by another domain, it will query the global catalog.

    2.  No, unless he has an account on that domain.  That does not mean that a domain controller in the dissolved domain cannot autenticate him.  When he logs on, he will have to make sure that his domain is selected in the domain drop down list.

    3.  Same as above.

    If you need deeper answers, please do so.
    LVL 11

    Expert Comment

    Here is a nice link to how replication works.  It even explains the various AD partitions and how they are replicated.  Very good stuff to know.  Enjoy!

    Author Comment

    Ok, so even if transitive trust STILL need to have a username in the domain you are trying to log into.
    Is that correct?

    Thanks for link. Will read it at work tomorrow!
    LVL 11

    Accepted Solution

    Yes, you are correct.  Just to clarify if needed.  Say you have a domain in NY and another in CA.  A CA user will be able to travel to NY and log on and work.  The CA user will make sure that CA domain is selected and not NY domain.  Although he could log on, he is not considered a member of the NY domain.  Additionally, you can grant him access to resources in the NY domain.  You can even make him a domain admin in the NY domain.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    Basic understanding on "OO- Object Orientation" is needed for designing a logical solution to solve a problem. Basic OOAD is a prerequisite for a coder to ensure that they follow the basic design of OO. This would help developers to understand the b…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    This video is in connection to the article "The case of a missing mobile phone (". It will help one to understand clearly the steps to track a lost android phone.

    730 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now