How to share resources between two separate Active Directory Forests

Posted on 2012-08-28
Last Modified: 2012-08-30
Hi All,

I have a domain named (pseudonym) which is running windows server 2008r2 Domain Controllers in a Server 2008 forest functional level. I have a sister company with a domain named (also a pseudonym). has also got server2008 r2 sp1 in the same domain and forest functional levels as

I want to allow users in to have access to file and print resources in as well as a local intranet portal.

1, What is the best means of achieving the above goal?
2, What are the prerequisites for the answer to question 1, above?
3, What are the DNS considerations in the above if any?
Question by:it_gsr
    LVL 41

    Expert Comment

    LVL 10

    Assisted Solution

    You should configure an outgoing forest trust on to
    To do this on both domains you will need to create a dns stubzone for the others domain.  Then configure the trust. If you want authentication to happen both ways, consider using 2-way forest transitive trust.

    from the first post, you will want to look at cross forest trust, not cross domain trust.
    LVL 53

    Accepted Solution

    You have a couple solutions but depending on the ease of setup/cost factor the easiest way to setup a connection to 2 Forests would be an "External Trust".

    Creating a External Trust -

    There are several ways to configure an external trust e.g one-way,two-way etc. See above link.

    Depending on the cost and also the types of resources you will be sharing you might also want to check out ADFS.

    Step-by-step guide -

    Configuring DNS for External Trust

    Hope this helps!

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
    Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
    This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
    This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now