Foreign Security Principals - Active Directory - Basic Question

Dear Experts,

In AD, within a domain, there are default folders/containers. There is one called ForeignSecurityPrincipals.

Can someone kindly explain the purpose of this for me in a very nut-shellish approach. I can;t find any good information on the net.

Cheers,
ouch_mybrain_Asked:
Who is Participating?
 
Brian PiercePhotographerCommented:
It contains user accounts from external trusted forests
0
 
ouch_mybrain_Author Commented:
Thanks guys. Now some follow up questions.

Do the accounts replicate/copy from these other trusted forests automatically, or, are the accounts simply shortcuts to data on the foreign domain controller's AD - so if the trusted domain became untrusted, I would be disconnected from the foreign accounts? How much control would I have over these "foreign" accounts - can I administer them?  Hyperthetical situation - can Domain A trust Domain B, but Domain B not trust Domain A?
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
Brian PiercePhotographerCommented:
You can set up one way external trusts so that Domain A will trust Domain B but not the other way around
see http://technet.microsoft.com/en-us/library/cc961481.aspx
see also
http://technet.microsoft.com/en-us/library/cc779144(WS.10).aspx
0
 
ouch_mybrain_Author Commented:
KCTS. Just to confirm, Foreign AD accounts will only appear if that domain has trusted you?
0
 
Brian PiercePhotographerCommented:
They are from the domain that you trust
0
 
ouch_mybrain_Author Commented:
It must be a two way thing, otherwise a domain could look at other domains' users without permission?
0
 
loki_lokiCommented:
you can do it one way as KCTS says.  You have to accept a trust from both ends, whether it is one or two way.  Without the trusting domain (A in your example) accepting the trusted domain (B in your example) then B will not be able to look at A.
0
 
ouch_mybrain_Author Commented:
Thanks
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.