42. Creating Forest Trust
Creating Forest Trust
A computer running windows 2012 server Domain Controller.
A member server running windows server 2012 or Client running windows 7.
SYS1 SYS2
Domain Controller Member Server / Client
IP Address 10.0.0.1 IP Address 10.0.0.2
Subnet Mask 255.0.0.0 Subnet Mask 255.0.0.0
Preferred DNS 10.0.0.1 Preferred DNS 10.0.0.1
Steps:
1. Go to Active Directory and Trusts,
2. Right click the Domain name and select Properties.
3. Verify Domain and Forest functional level to beWindows Server 2012.
4. Select Trusts tab, Click New Trust.
5. On Welcome wizard, click Next.
6. In Trust Name, enter name of other Forest IBM.COM and click Next.
7. Select Forest trust and click Next
8. Select Two-way and click Next.
9. Select Both this domain and the specified domain and click Next.
10. Enter Administrator and Password of Specified domain:IBM.COM and click Next
11. Select Forest-wide authentication for Local Forest and click Next.
12. Select forest-wideforest-wide authentication for Specified Forest and click Next.
13. Verify the Trust Selections and click Next.
14. Verify Summary and click Next.
15. Select Yes, confirm the outgoing trust and click Next.
16. Select yes, confirm the incoming trust and click Next.
17. Click Finish.
18. Check Outgoing and Incoming Trusts and click OK.
Verification:
1. Try to logon on the MICROSOFT.COM domain computers or IBM.COM domain computers as other Domain Users.
Note: By default Users cannot log on to D.C.
2. Log in as MICROSOFT Administrator to MICROSOFT.com D.C and allow IBM users to log on to D.C using Domain Controller Security Policy in Group Policy Management.(allow Logon Locally Policy)
3. Similarly, allow MICROSOFT.COM users to log on to IBM.COM D.C using Domain Controller Security Policy of IBM.COM D.C
Comments