Figure 4-24 New Trust Wizard, Confirm Outgoing Trust page in C#

Drawer QR Code JIS X 0510 in C# Figure 4-24 New Trust Wizard, Confirm Outgoing Trust page

13. On the Confirm Incoming Trust page, shown in Figure 4-25, select Yes, Confirm The Incoming Trust if you created both sides of the trust. If you only created one side, choose No, Do Not Confirm The Incoming Trust. Click Next.

4-55

15. Note the presence of the shortcut trust you just set up in the Trusts tab of the Prop erties dialog box for the domain. An example is shown in Figure 4-26. Click OK.

Figure 4-26 Properties dialog box for a domain, Trusts tab, showing shortcut trust between fabrikam.com and chi.contoso.com, domains in separate trees in the same forest

A realm trust is a trust between a non Windows Kerberos realm and a Windows Server 2003 domain, created to allow cross-platform interoperability with security services based on other Kerberos version 5 implementations. To create a realm trust, complete the following steps: 1. Click Start, point to Administrative Tools, and then click Active Directory Domains And Trusts. 2. In the console tree, right-click the domain node for the domain for which you want to create a realm trust, and then click Properties. 3. In the Properties dialog box, click the Trusts tab. 4. In the Trusts tab, shown previously in Figure 4-17, click New Trust. 5. On the Welcome To The New Trust Wizard page, click Next. 6. On the Trust Name page, shown previously in Figure 4-18, type the DNS name of the target realm with which you want to establish a trust in the Name box, and then click Next.

4-56

4

7. On the Trust Type page, shown in Figure 4-27, select the Realm Trust option, and then click Next.

8. On the Transitivity Of Trust page, shown in Figure 4-28, select one of the follow ing choices:

If you want only this domain and the specified realm to form a trust relationship, click Nontransitive, and then click Next. If you want this domain and all trusted domains to form a trust relationship with the specified realm and all trusted realms, click Transitive, and then click Next.

4-57

9. On the Direction Of Trust page, shown previously in Figure 4-19, select one of the following choices:

If you want all users in both the domain and the realm to be able to access all resources anywhere in either the domain or the realm, click Two-Way, and then click Next. If you want only users in this domain to be able to access resources anywhere in the realm, click One-Way: Incoming, and then click Next. If you want only users in the realm to be able to access resources anywhere in this domain, click One-Way: Outgoing, and then click Next.

Note By selecting the One-Way: Incoming option, users in the realm will not be able to access any resources in this domain. By selecting the One-Way: Outgoing option, users in this domain will not be able to access any resources in the realm.

10. On the Trust Password page, shown previously in Figure 4-22, type the trust password in the Trust Password and Confirm Trust Password boxes. This password must match the password used in the realm. Click Next. 11. On the Trust Selections Complete page, verify that the correct trust settings appear, and then click Next. 12. On the Completing The New Trust Wizard page, verify the settings, and then click Finish. 13. Note the presence of the realm trust you just set up in the Trusts tab of the Prop erties dialog box for the domain. Click OK.

An external trust is a trust between Windows Server 2003 domains in different forests or between a Windows Server 2003 domain and a domain whose domain controller is running Windows NT 4 or earlier. This trust is created to provide backward compati bility with Windows NT environments or communications with domains located in other forests not joined by forest trusts. Before you can create an external trust, you must configure a DNS forwarder on both of the DNS servers that are authoritative for the trusting forests.

4-58