In the previous lesson we've talked about how trusts work in a forest.
Now let's talk about how trusts work between forests.
Let's open up Active Directory Domain and trusts and see where you can create a new trust relationship
and how you can choose different types.
For example forest and domain.
So if the ADA this environment contains more than one forest it's possible to set up trust relationships
between the Active Directory Forest Road domains this Forest Trust can be forest wide trusts or selective
trusts.
Forest Trust can be one way or two way forest trusts are also translated for domains in each domain.
In each forests or forest trust relationship allows users who are authenticated by a domain in one forest
to access resources that are in a domain in the other forest provided that they have been granted access
rights.
If the Forest Trust is one way domain controllers in the trust and forest can provide session ticket
to users in any domain in the trusted Forest Forest trusts are significantly easier to establish maintain
and administer than separate trust relationships between each of the domains in the forest.
Forest trusts are particulary useful in scenarios that involve growth or organisation collaboration.
Mergers and acquisitions or within a single organization that has more than one forest in which to isolate
Active Directory data and services Forest Trust are also useful for application service providers for
collaborative business extroverts and for organizations that want to that want a solution for administrative
autonomy.
Let's take a look at Forest Trust's benefits.
The first benefit is simplified management of resources across two Windows Server 2008 or newer forest
by reducing the number of external trust necessary to share resources.
The second benefit is complete two way trust relationships with every demand in each forest.
The next benefit is use of European authentication and growth to forests and other benefit is use of
the carbon price version 5 protocol to improve the trust versus ness of authentication data that transfers
between forests.
Another benefit is flexibility of administration administrative tasks can be unique for each forest.
You can create a Forest Trust only between two aided years forests.
You cannot extend the trust implicitly to a third forest.
This means that if you create a Forest Trust between forest one and forest two you can create a Forest
Trust between forest 2 and forestry.
Forest 1 does not have an implicit trust with Forest 3.
So forest trusts are not transitive between multiple forests.
You must address several requirements before you can implement a forest trust including ensuring that
the forest functional level is Windows Server 2003 or newer and that DNS name resolution exists between
the forests.