asked on

Security on Trust Between two domains

Currently i have my corporate Domain A and I have just created a test Domain B for our development/QA group for their testing. I have setup everything except for a trust relationship between Domain A and Domain B. DNS is working nicely with the conditional forwarding between the two domains. I know i can set a 1 way trust so my corporate Domain A can be authenticated in Domain B and the Dev team can use the corporate accounts in their test environment. They have also installed SCVMM 2008 R2 in their test environment domain B. The problem is they have installed SCVMM 2008 R2 console on their corporate desktops Domain A and it will not authenticate and can't login into their scvmm test server. I know a 2-way trust will work accrding to microsoft for scvmm, but i am worried as to if there is any vulnerabilities or security issues that i need to be concerned about if i was to make a two-way trust.

If i was to make a 2-way trust, is my Domain A proned to attacks or updates/Deletes, etc....?

Thanks.

ASKER CERTIFIED SOLUTION

Darius Ghassem

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

josog

ASKER

Using RDP was the original plan of mine, but they have applications their developing on their desktop uses their corporate accounts which also needs to be in their testing domain environment.

I do notice when creating the 2 way trust, that from domain B, they can see all my accounts in DOmain A (like searching, viewing properties, etc...) but yet they can't edit anything.

as long as each domain is managed seperatly and the admin in domain B can't change anything in Domain A, i am happy.

Darius Ghassem

That is the way it will work you must give permission to allow for editing.