Trust between child domains

Posted on 2008-10-14
Last Modified: 2013-12-24
Dear All,

I have confusing in Active Directory Trust. Lets say I have the following:

MMM.local && as a root domain
And I have two child domains from the root as the following:

Now; there are a Transitive (two-way) trust between MMM.local & both another domain (East & West). Until here its ok
My question is; does there a default trust between East & West domains? Or I have to make a manually trust between them.


Question by:devdept
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 30

Expert Comment

ID: 22710672
child trust have two way trusts set when you add them to the ad tree

LVL 11

Expert Comment

ID: 22711794
all child domains you add will always trust eachother all the way up and down from the root, even child of child domains will trust every other child domain.

this is the default behavior
LVL 32

Expert Comment

ID: 22712068
Within a Domain Tree , there is a 2 way transitive trust between domains. It is by default and a normal behaviour.
Is there anything specific that you have in your mind. Pleas feel free to clarify that, I am assuming that there is something else you want to ask too.
Office 365 Training for Admins

Learn how to provision tenants, synchronize on-premise Active Directory, and implement Single Sign-On with these master level course.  Only from Platform Scholar


Author Comment

ID: 22729392
Hi Nitin,

I mean, does East.mmm.local --- Trust--- West.mmm.local --- without making trust configuration. the users in East domain can access the resources in West domain without additional configuration.

Also, if i need to migrate a user from East to West,,,, sure i have to use ADMT... but does the tool will work without creating the trust between both domain.


LVL 32

Accepted Solution

gupnit earned 500 total points
ID: 22729491
Since EAST and WEST are both child domains of MMM.LOCAL there is no need to create any explicit Trust. A 2WAY Trainsitive trust is automatically created. Also, you can move objects / migrate from one to another without any hassle
Feel free to clarify further

Author Comment

ID: 22753501
Hi Nitin,
Thanks for your replay, i think the trainsitive trust is created between the parent and child domain. does this also work with child to child???

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

A Stored Procedure in Microsoft SQL Server is a powerful feature that it can be used to execute the Data Manipulation Language (DML) or Data Definition Language (DDL). Depending on business requirements, a single Stored Procedure can return differe…
Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question