Create a one-way trust

nav2567 used Ask the Experts™
Hello experts,

We need to setup a one-way trust for our company users (domain A) to access AD resources in another company (domain B).

I have put together what I think makes sense in the attached.

Please advise if there is something that I have missed.

Also, our domain controller servers are on WIN2K8 but both the forest and domain functional levels are on WIN2K3.

Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Seems pretty straight forward. most of this is on DomainB, once you intitate the trust.
if there's an SBS server in the mix it'll not work, just as a heads up.
Maybe obvious, but you did not mention DNS settings - name resolution and routing are also important in establishing trusts
Jeff GloverSr. Systems Administrator

As long as you have the proper ports open between the domains, you should be fine. The note on DNS is  crucial. Make sure you have a conditional forwarder set in each domains DNS server pointing to the other domains DNS server(s). The forest and domain funtional levels are fine.


Thanks a lot, everyone.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial