Trust between child domains

Posted on 2008-10-14
Last Modified: 2013-12-24
Dear All,

I have confusing in Active Directory Trust. Lets say I have the following:

MMM.local && as a root domain
And I have two child domains from the root as the following:

Now; there are a Transitive (two-way) trust between MMM.local & both another domain (East & West). Until here its ok
My question is; does there a default trust between East & West domains? Or I have to make a manually trust between them.


Question by:devdept
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 30

Expert Comment

ID: 22710672
child trust have two way trusts set when you add them to the ad tree

LVL 11

Expert Comment

ID: 22711794
all child domains you add will always trust eachother all the way up and down from the root, even child of child domains will trust every other child domain.

this is the default behavior
LVL 32

Expert Comment

ID: 22712068
Within a Domain Tree , there is a 2 way transitive trust between domains. It is by default and a normal behaviour.
Is there anything specific that you have in your mind. Pleas feel free to clarify that, I am assuming that there is something else you want to ask too.
Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.


Author Comment

ID: 22729392
Hi Nitin,

I mean, does East.mmm.local --- Trust--- West.mmm.local --- without making trust configuration. the users in East domain can access the resources in West domain without additional configuration.

Also, if i need to migrate a user from East to West,,,, sure i have to use ADMT... but does the tool will work without creating the trust between both domain.


LVL 32

Accepted Solution

gupnit earned 500 total points
ID: 22729491
Since EAST and WEST are both child domains of MMM.LOCAL there is no need to create any explicit Trust. A 2WAY Trainsitive trust is automatically created. Also, you can move objects / migrate from one to another without any hassle
Feel free to clarify further

Author Comment

ID: 22753501
Hi Nitin,
Thanks for your replay, i think the trainsitive trust is created between the parent and child domain. does this also work with child to child???

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
A hard and fast method for reducing Active Directory Administrators members.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question