Can a child user domain can authenticate by defaut on a Root Domain ? (AD)

Posted on 2011-05-03
Last Modified: 2012-05-11
In active Directory 2003, can a child user domain can make authentication by defaut on a Root Domain ? Is it the same process ? as fast (according to same network) ?

Question by:Carlito985
    LVL 57

    Accepted Solution

    The user in the child domain will still have to contact a DC in the child in order to authenticate.


    LVL 23

    Assisted Solution

    by:Stelian Stan
    It should be able to authenticate.
    LVL 1

    Author Comment

    ok, during the authentication of the child user domain on the root domain, is the root domain is contacting the child DC ? or does it has a "copy" of account ?

    Can you give me some detail about :

     " The user in the child domain will still have to contact a DC in the child in order to authenticate."

    LVL 11

    Expert Comment

    If a user from a child domain (who has rights to log on to a system in the root domain) logs on to a machine in the root domain, the authentication is still being performed by the DC in the root domain.

    Does that help ?
    LVL 14

    Expert Comment

    LVL 15

    Assisted Solution

    With your setup in Active Directory, you have one Forest with Parent - Child Domain. Automatically there is a two transitive trust in place between the Parent and Child Domain. The Gobal Catalog Server's role is to enable searches throughout the Forest. It keeps a PAT - Partial Attribute Set of every other Domain in the Forest - in your case the Child Domain.

    If your Child user is trying to Authenticate with a Domain Controller in the Parent Domain, the Global Catalog Server would direct his logon request to a Domain Controller in the Parent Domain or if he is trying to access a shared folder etc.
    LVL 1

    Author Comment

    thanks guys !

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    [b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
    I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
    This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
    This tutorial will show how to inventory, catalog, and restore media from legacy versions of Backup Exec into both 2012 and 2014 versions of the software. Select Storage from the tabs along the ribbon bar as the top: Ensure the proper storage devi…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now