Information Technology Reference
In-Depth Information
Figure 10-10
Reviewing trust relationships and types
10
F2-dom1.com
(forest root)
suba.F2-dom1.com
F2-dom2.com
Automatic tru
s
t
Shortcut trus
t
Figure 10-11
A forest and its trusts
The forest shown in Figure 10-11 is a small forest of only two trees and three domains. The
path between suba.F2-dom1.com and F2-dom2.com is only two referrals away, so normally you
don't need to create a shortcut trust between suba.F2-dom1.com and F2-dom2.com. However,
if four or five other domains were along the path between these two domains, a shortcut trust
makes sense if users from these domains access each other's resources frequently.
In the preceding example, because all the domains are in the same forest, the DNS domains
could be configured as Active Directory-integrated zones, and zone replication could be config-
ured so that zones are replicated to all DNS servers in the forest. No further DNS configuration
is necessary because the DNS servers in F2-dom1.com store the zone for F2-dom2.com, and vice
versa. Trusts between forests and external trusts might require additional DNS configuration.
Search WWH ::
Custom Search