1 00:00:06,340 --> 00:00:08,790 Configure an ADF trusts. 2 00:00:09,110 --> 00:00:11,780 But first some questions again. 3 00:00:11,810 --> 00:00:17,890 Question 1 which of the following must be in place before you create a Forest Trust. 4 00:00:18,230 --> 00:00:21,110 And we have several options as answers. 5 00:00:21,110 --> 00:00:26,420 Option one name resolution between the route demands in each forest. 6 00:00:26,420 --> 00:00:33,510 Option two forest functional level of Windows Server 2003 or later option 3. 7 00:00:33,620 --> 00:00:42,290 Forest functional level of Windows Server 2008 or later option for forest functional level of Windows 8 00:00:42,290 --> 00:00:44,670 Server 2012 for later. 9 00:00:44,690 --> 00:00:46,230 And the last option. 10 00:00:46,340 --> 00:00:51,910 Domain controllers must be enabled for selective authentication. 11 00:00:51,920 --> 00:01:00,680 Press pause here and think about the answers and the correct answer are Option 1 which is name resolution 12 00:01:00,680 --> 00:01:08,750 between the root domains in each forests and option to forest functional level of Windows Server 2003 13 00:01:08,750 --> 00:01:09,410 or later. 14 00:01:09,710 --> 00:01:16,310 So to create a Forest Trust You must have configured name resolution between the root domains in each 15 00:01:16,310 --> 00:01:26,000 forest and traditionally the forest functional level of each forest must be Windows Server 2003 or later 16 00:01:26,330 --> 00:01:34,100 and the second question which Ada distrusts certain allows you to control the scope of authentication 17 00:01:34,100 --> 00:01:36,890 of trusted security principles. 18 00:01:36,890 --> 00:01:38,590 And again several options. 19 00:01:38,600 --> 00:01:49,550 Option one named suffix are out in to Burris constrained delegation 3 selective authentication for seed 20 00:01:49,550 --> 00:01:57,530 filtering and 5 set history press pause here and think about the answer and the correct answer is option 21 00:01:57,530 --> 00:01:58,310 3. 22 00:01:58,310 --> 00:02:05,900 Selective authentication selective authentication allows you to manage the scope of the authentication 23 00:02:05,900 --> 00:02:14,840 of trusted security principles by allowing authentication for services only on computers that you specify. 24 00:02:14,850 --> 00:02:23,850 Now let's switch to this section over real a ideas trusts enable access to resources in a complex aided 25 00:02:23,940 --> 00:02:25,400 us environment. 26 00:02:25,400 --> 00:02:33,410 When you deploy a single domain you can easily grant access to resources within the domain to users 27 00:02:33,410 --> 00:02:35,240 and groups from the domain. 28 00:02:35,240 --> 00:02:42,320 When you implement multiple domains or forests you should ensure that the appropriate trusts are in 29 00:02:42,320 --> 00:02:46,070 place to enable the same access to resources. 30 00:02:46,070 --> 00:02:53,570 This section describes how trusts works in an 80 days and wire amount and how you can configure trusts 31 00:02:53,840 --> 00:02:56,690 to meet your business requirements. 32 00:02:56,690 --> 00:03:03,620 After completing this section you'll be able to describe the trust types that you can configure in Windows 33 00:03:03,620 --> 00:03:06,340 Server 2016 environment. 34 00:03:06,380 --> 00:03:10,350 Explain how trusts work in an 80 days forest. 35 00:03:10,370 --> 00:03:19,520 Explain how trusts work between 80 days forests describe how to configure advanced trust settings and 36 00:03:19,520 --> 00:03:21,700 configure a Forest Trust. 37 00:03:21,710 --> 00:03:22,670 Let's get started.