More old notes:<\/p>\n
These are the steps I used to create a one way trust between a Windows 2008 R2 server domain and a Windows 2003 server domain. The object was to give the Windows 2008 domain environment (DomainA.com) access to the Windows 2003 domain environment (DomainB.com), but DomainB.com would have no access to the DomainA.com domain. This process can be very confusing and difficult to keep straight in your head, but I am certain that these steps worked in the environments I described above.<\/p>\n
Windows 2008 –> Windows 2003.
\nFrom DomainA.com (Windows 2008):
\nBring up “Active Directory Domains and Trusts”
\nRight mouse click on DomainB.com and go to Properties.
\nClick on the Trusts tab.
\nClick “New Trust”
\nNext
\nTrust Name: DomainB.com
\nForest trust
\nOne-way: incoming
\nThis domain only
\nTrust Password
\nNext
\nNext
\nNo,do not confirm the incoming trust.<\/p>\n
From DomainB.com (Windows 2003):
\nBring up “Active Directory Domains and Trusts”
\nRight mouse click on DomainB.com and go to Properties.
\nClick on the Trusts tab.
\nNew Trust
\nNext
\nTrust Type: Forest trust
\nOne-way: outgoing
\nSides of Trust: This domain only
\nForest-wide authentication
\nTrust Password
\nNext
\nNExt
\nConfirm Outgoing Trust: Yes, confirm the outgoing trust.<\/p>\n
Then, to grant authentication permission:
\nFrom the Active Directory Users and Computers on the DomainB.com server:
\nClick View and Advanced Features.
\nRight click on Domain Controllers and go to Properties.
\nThen click on the Security tab.
\nClick Add\u00e2\u20ac\u00a6
\nClick Locations\u00e2\u20ac\u00a6
\nSelect the DomainA.com from the list and click Ok.
\nThen enter under “Enter the object names to select” the user\/group that you want to grant access to DomainB.com from a DomainA.com account. In my case, I just chose Domain Users.
\nFrom here I am prompted for DomainA.com credentials which I enter. This can be an issue that I need figure out, because what if I have no credentials in DomainA.com? It does seems that I shouldn’t need any in this configuration. In my case, this allowed a DomainA.com login the capability to login to DomainB.com computer and access resources on DomainA.com and DomainB.com as permitted. However, because it is a one way trust, DomainB.com cannot access resources on DomainA.com.<\/p>\n","protected":false},"excerpt":{"rendered":"
More old notes: These are the steps I used to create a one way trust between a Windows 2008 R2 server domain and a Windows 2003 server domain. The object was to give the Windows 2008 domain environment (DomainA.com) access to the Windows 2003 domain environment (DomainB.com), but DomainB.com would have no access to the [&hellip<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[222,63,128],"class_list":["post-545","post","type-post","status-publish","format-standard","hentry","category-documentation","tag-trust","tag-windows-2003","tag-windows-2008"],"share_on_mastodon":{"url":"","error":""},"_links":{"self":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts\/545","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=545"}],"version-history":[{"count":4,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts\/545\/revisions"}],"predecessor-version":[{"id":631,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=\/wp\/v2\/posts\/545\/revisions\/631"}],"wp:attachment":[{"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=545"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=545"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jim-zimmerman.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=545"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}