Solved

Universal groups or trusts

Posted on 2011-09-11
2
309 Views
Last Modified: 2012-06-21
Hi guys hope you all well and can assist.

Guys we are shrinking the number of domains nour environment down from six to two.
Currently we have trusts in place.
What we will have is the following:

Root domain
|____ subdomainA

What I want to know is would you guys set up a trust between root and sub?
Would this be needed. And or would you see a need to use universal groups here?

Any help greatly appreciated.
0
Comment
Question by:Simon336697
2 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 36519801
There should be a trust established between the forest root and the sub domain (tree root trust)  http://technet.microsoft.com/en-us/library/cc775736(WS.10).aspx

You could use globals and domain locals for resource sharing UGLY/AGLP  http://adisfun.blogspot.com/2009/04/ugly-aglp-what-are-they.html

Thanks

Mike
0
 
LVL 1

Author Comment

by:Simon336697
ID: 36519915
Thanks mike
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question