Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Transitive trusts and existing child domains

Posted on 2013-02-07
1
Medium Priority
?
783 Views
Last Modified: 2013-02-25
If i look at MS Technet article around AD Forest trusts it states:

"Each time you create a new domain in a forest, a two-way, transitive trust relationship is automatically created between the new domain and its parent domain. If child domains are added to the new domain, the trust path flows upward through the domain hierarchy extending the initial trust path created between the new domain and its parent domain."

Does this mean that this automatic relationship is not created for existing child domains that were there before the trust was created? Do these need to be done manually?

Reason for question is that I am seeing this where Root Forest domain for Forest A doesn't trust child domains of Forest B and vice versa.
0
Comment
Question by:jafar54
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 17

Accepted Solution

by:
Tony Massa earned 2000 total points
ID: 38863549
It seems you're mixing intra-forest trust (parent-child) with external forest trust.
To your point, if you create a TWO-WAY forest trust, then there should be a transitive trust between all domains in each forest: http://technet.microsoft.com/en-us/library/cc773010(v=ws.10).aspx
Creating a forest trust between two Windows Server 2003 forests provides a one-way or two-way, transitive trust relationship between every domain residing within each forest
Are you sure that the trust was established as a two-way?  Can users from every other domain access resources in each of the other domains?

I would contend that it could be a problem with DNS resolution, maybe theres a duplicate NETBIOS name, or some other problem...new child domains should be automatically trusted in a two-way external forest trust.  From a domain computer in Forest A, can you browse to the NETLOGON folder on the new domain in forest B?

\\new.domain.FQDN\netlogon
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question