answersLogoWhite

0

Use external trusts to provide access to resources located on a Windows NT 4.0 domain or a domain located in a separate forest that is not joined by a forest trust

When a trust is established between a domain in a particular forest and a domain outside of that forest, security principals from the external domain can access resources in the internal domain. Active Directory creates a foreign security principal object in the internal domain to represent each security principal from the trusted external domain. These foreign security principals can become members of domain local groups in the internal domain. Domain local groups can have members from domains outside of the forest.

Directory objects for foreign security principals are created by Active Directory and should not be manually modified. You can view foreign security principal objects from Active Directory Users and Computers by enabling advanced features. For information about enabling advanced features, see To view advanced features.

In domains with the functional level set to Windows 2000 mixed, it is recommended that you delete external trusts from a domain controller running Windows Server 2003. External trusts to Windows NT 4.0 or 3.51 domains can be deleted by authorized administrators on the domain controllers running Windows NT 4.0 or 3.51. However, only the trusted side of the relationship can be deleted on the domain controllers running Windows NT 4.0 or 3.51. The trusting side of the relationship (created in the Windows Server 2003 domain) is not deleted, and although it will not be operational, the trust will continue to display in Active Directory Domains and Trusts. To remove the trust completely, you will need to delete the trust from a domain controller running Windows Server 2003 in the trusting domain. If an external trust is inadvertently deleted from a domain controller running Windows NT 4.0 or 3.51, you will need to recreate the trust from any domain controller running Windows Server 2003 in the trusting domain

User Avatar

Wiki User

13y ago

What else can I help you with?

Related Questions

Difference between a Local Group Policy and a Domain Group Policy?

Microsoft recommends that access control to computer resources be administered by using groups. In this way, many users that have similar needs for resources can be dropped into a group that has the correct permissions already configured instead of individually modifying each user account. Group permissions to access resources are configured using group policy. A policy usually addresses one very specific aspect of a system's configuration. There are many policies that can be configured for a group to control system access and behavior. Local group policy addresses only users who are physically logging into one particular machine such as the server itself or a stand alone operating system. To log into a machine locally, a user must create a unique ID/Password pair that authenticates the local user to the local physical system. Once authenticated to the local physical machine, group policy according to which local group the user is assigned is initiated. Domain authentication as well as domain group policy is maintained centrally by the server for the domain. Even if a user has configured a local ID/Password pair for their local physical computer, a different and unique ID/Password pair is created to log onto the domain. When a domain user is created, they also must be assigned to a domain group. Once the server for the domain authenticates the domain user, the policy for the domain group the user belongs to is initiated. These policies are centrally administered by the domain administrator instead of each computer in the domain being configured separately for each user. Domain group policy can be configured to control access and behavior for any resource on the entire domain including resources on client computers. Local group policy can only control what is on the local machine at which a user is sitting. Finally, domain group policy supersedes any local group policy.


Do marketeers create needs?

They do not create needs, but moreso create wants


What are the steps that need to be taken in order to make your own web page?

To create a web page is not difficult. First, one needs to get a domain name. Second, choose a web host and create an account. And third, design the webpage.


What a girl needs from a boy in relationship?

a girl just needs a friend who can be a boy in a friendship, but woman needs a man in relationship


Does a girlfriend who needs constant attention create challenges in a relationship?

Yes, a girlfriend who requires constant attention can create challenges in a relationship, as it may lead to feelings of suffocation, imbalance, and strain on the partner's emotional well-being. Communication and setting boundaries are important in addressing this issue.


How does a domain name server work?

What we call a Domain Server is a machine that is like a complicated traffic control centre. When a computer joins a network is needs an address. The Domain Server either has an address for it or creates an address for it. The address is important as that computer needs to introduce itself to other computers and the Server needs to know who is connected and who is not.


Why would only two speakers be working using realtek hd audio card?

The card needs to be configured, or re-configured to play through more then 2 speakers. This can be changed in "Audio/Speakers/Sound" in the control panel.


Where can I find instructions on how to perform a domain transfer?

When a domain needs to be transferred the best option is to seek infromation at the site where the domain is being transferred to. The receiving site will have all the instruction pertinent to them.


How does a person register a domain?

A person should register the domain and the website under one's own ownership to be identified in the domain contact information. The person also needs to use the correct top level domain registrar for that country.


What baud rate needs to be configured on terminal emulation software to allow a connection to the console port of a router?

The default speed is 9600.


Is it possible that a computer can be client although it is far from the server computer?

yes because it works on DHCP principle..the subnet needs to be configured for it


How do you change the notifications on growl for mac os x?

Growl adds a pane to the Other section of the System Preferences from which it can be configured to your needs.