Step by Step Guide to Create TRUST Relationship Between 2 Different DOMAINS

7/21/2019 Step by Step Guide to Create TRUST Relationship Between 2 Different DOMAINS

1/25

Two-way Transitive Trust

Trust relationship between two different domains

Trust:A relationship between different domains or forests that allow sharing of resources

between them.

Trust can be transitive or non-transitive.

Transitive Trust:Trust which can be extended to other domains in the forests.

Non- Transitive Trust:Trust which cannot be extended to other domains in the forests,

it is only between the two domains of different forests.

Types of Trusts

External Trust: Trust between only two domains in different forests, it is a non-

transitive trust.

Forest Trust: Trust between the forest root domains and it allows other domains in the

forest to share resources, it is a transitive trust.

Shortcut Trust:It is a kind of trust which allows users from different domains within

the same forest to access resources faster.

Realm Trust:It allows windows active directory network to trust Unix-based network.

Direction of Trust

ne-way Trust:etwork A trusts network !, and then network ! can access network A

only.

Two-way Trust:etwork A trusts network !, and vice versa, then both networks A and

! can access each other.

!onfi"uration of Trust

"or this scenario we have two different domains sysglobe.com and techsavvydiary.com, both the

domain controllers are initially configured like basic #$ configuration etc

Step-# !onfi"uration of Stub $one of both the DNS servers

Stub $one: It simply gives information about other #$ servers.

Trust Relationship between Two Diferent Domains Page 1


2/25


Configuring Stub zone on sysglobe.com

Start -> administrative tools -> DNS

Select: Forward looku zone -> !.click: New zone

Click: Ne"t



3/25


Select: Stub zone

Select: #o all DNS servers in t$e forest sysglobe.com



4/25


%nter t$e name of t$e domain wit$ w$om you want to create trust:

tec$savvydiary.com

Note: &f t$e correct domain name is not entered t$e stub zone will not be created.

%nter t$e &' of ot$er domain wit$ w$om you want to create trust:



5/25


C$eck t$is bo" if tec$savvydiary.com $as multile DNS servers

Stub zone is successfully created so click Finis$



6/25


!eeating same stes on tec$savvydiary.com DC( configuring stub zone for sysglobe.com

domain( )ust c$anging t$e zone name and &' address.

Step-% !onfi"uration of Trust



7/25


Note: !efore configuring Trust first check the "orest functional level, it must be same between

the two domains, and it must be atleast %&&'.

(hose any one of the domain, and configure Trust on it. Trust on the other domain will be

automatically configured.

Configuring #rust on sysglobe.com

Select: start -> administrative tools -> *ctive directory domains and trusts

Select: domain name i.e. sysglobe.com -> 'roerties

Trust Relationship between Two Diferent Domains Page


8/25


Select: #rusts

Select: New #rust

Trust Relationship between Two Diferent Domains Page !


9/25


Click Ne"t

%nter t$e name of t$e Domain wit$ w$om you want to create trust

Trust Relationship between Two Diferent Domains Page "


10/25


+ere it is tec$savvydiary.com

Select: Forest trust

Select: #wo-way

Trust Relationship between Two Diferent Domains Page 1#


11/25


Select: ,ot$ t$e domain and t$e secified domain

Note: #$is otion will create trust automatically on t$e ot$er domain

%nter t$e credential of t$e domain wit$ w$om you want to create trust.



12/25


i.e. tec$savvydiary.com

Select: Forest wide aut$entication

*gain select: Forest wide aut$entication



13/25


#rust selection is comleted so click ne"t

#rust relation is successfully created so click Ne"t.



14/25


Select: es( confirm t$e outgoing trust

Select: es( confirm t$e incoming trust



15/25


#rust is successfully comleted so click Finis$

e can confirm from t$is window t$at our trust $as successfully created.



16/25


Step-& "ivin" permission to users to access each other domain

)e have users that are already created in the active directory on both the domain controllers.

"irst performing some steps on sysglobe.com, then same steps will be repeated on

techsavvydiary.com. )e will create a *lobal group and will put all the users in it, then will create

a Universal group and will make *lobal group member of it, then we will shift to

techsavvydiary.com and will create a #omain +ocal group, then will make Universal group of

sysglobe.com member of #omain +ocal group of techsavvydiary.com.

$tart - administrative tools - active directory users and computers



17/25


U- .click , ew - *roup

*iving name to *roup e.g. $*global and select *lobal from *roup scope



18/25


$elect all users - .click , Add to a group

$elect the *lobal group then clicks /

Trust Relationship between Two Diferent Domains Page 1!


19/25


ow creating Universal group and making the *lobal group member of it

$elect0 U - .click , ew - *roup

*iving name to group e.g. $*universal and selecting Universal from *roup scope.

Trust Relationship between Two Diferent Domains Page 1"


20/25


$elect *lobal group- .click , Add to a group

$elect Universal group then click ok

Trust Relationship between Two Diferent Domains Page 2#


21/25


ow shifting to other domain i.e. techsavvydiary,com and creating #omain +ocal group.

$elect U - .click, ew - *roup

*iving name to group e.g. T$#local and selecting #omain local from the group scope.



22/25


$elect #omain local group - .click , 1roperties.

$elect 2embers tab then click Add



23/25


ow select +ocation

$elect domain that you want to give access e.g. sysglobe.com



24/25


$elect Universal group from that domain e.g. $*universal group from sysglobe.com

ow we have successfully added the universal group to the domain local group, now the users of

sysglobe.com can access the permitted resources in the techsavvydiary,com.



25/25



Documents

Step by Step Guide to Create TRUST Relationship Between 2 Different DOMAINS