Trusts?

[rokitman1]

Hi I have to Wuinows 2003 servers
each are their own domains controller;

DomainA
&
DomainB

I have followed the "create trusts" wizard and read the MS help on creating a "transative" trust, I can create a trust relationship but its not transative?

does this matter?
what does transative actually involve / require ?


thanks

Rokitman1
"Any Time..Any Place..Anywhere.....That's Martini"

 

[ShackDaddy]

Transitive trust just requires that the trust relationship goes both ways. Trusts are usually transitive by default. You have to go out of your way to create a trust that is not transitive.

When a trust is transitive, it means that a domain will not only trust the other domain, but will also trust every child domain in the other domain.

If you've created a simple trust between two domains, it's already transitive.

ShackDaddy

 

[rokitman1]

Hi,

thanks, under transative it says "NO"

??????

Rokitman1
"Any Time..Any Place..Anywhere.....That's Martini"

 

[ShackDaddy]

I was wrong about something in your scenario. When you are trying to create cross-forest trusts, like you are probably doing (each AD set up completely independently), the trusts will never be transitive. You basically have to create two one-way trusts to get trust functionality.

My earlier answer only applied to trusts between domains that are in the same forest.

ShackDaddy

 

[ShackDaddy]

Actually, this is a subject that Microsoft contradicts itself a lot on. The following article walks you through creating what's called a "forest trust." This trust is, according the article, transitive:

http://www.microsoft.com/technet/pr...ons/f82e82fc-0700-4278-a166-4b8ab47b36db.mspx

ShackDaddy

 

[rokitman1]

both are new domains, stand alon, thats correct...
now that would explain how we got round completing the trust, by creating a one way on each domain!!!!

so as it says "No" on transative, that is in fact correct?

the shares and access work, we just could not understand the not transative part....

many thanks

Rokitman1
"Any Time..Any Place..Anywhere.....That's Martini"

 

[ShackDaddy]

If you haven't created subdomains for either domain, I wouldn't worry about the "transitive" part.

ShackDaddy