I think that you are referring to a transitive trust. A Transitive trust is like a road. If you had two islands and build a bridge between them, a car could drive between the islands and also to any destination on either island. When a forest trust is created between two forest, the forest trust in transitive and thus allows access from any domain in either forest to any other domain in the other forest.
The Best Videos I ever watched....I been seen Train Signal and CBTS.. but your videos are the Best...Hatttss Off to you...i am just sad have interview today and why I not watched them on past
Trusts basically provides a pathway or communication channel if you will between different domains and forests. Any user can use the trust to access anther domain. Weather the user can access resources in the other domain depends on the permissions that user has. When you migrate a user from one domain to anther you are deleting the old user and creating a copy in the new domain. If the user can't access something in the old domain they need to have the permissions changed so they can.
Unless you are referring to how does it find the other forest. In that case you need to configure your DNS so it can resolve the other forest. For example, create a stub zone, use conditional forwarding or a second zone if you have access to their dns.
thanks for all your videos, i'm watching them one by one, i'm not very good in english but i can understand every word you say :) thanks again for every single minute you spent in making these videos.
Awesome video, this is just what i needed. For an external trust, do not forget to configure your DNS as a secondary zone or conditionnal forwarder for each domain.
I think you are referring to the the IP Addresses used in each company. Effectively these can be any IP Addressees, as long as the routers in each company can route the data effectively. If both companies use the same IP Address ranges this will not work. However, if there are address over laps, it is possible to have only certain resource available. For example, make available a domain controller and other resources on a DMZ network for the other company.
We strive to have correct and accurate information. If we learn that something is inaccurate, we'll make every attempt to correct it to make sure our users are provided the best information.
I really wish i had been watching these videos before.microsoft exams are so damn convoluted and some of the info written so terribly. these videos simplify everything. its too bad you dont have anything for mcsa 2012 or 2016. i hope this channel makes vids for those exams too.
this is a lot of detail and material, i can imagine it took a lot of time. thanks for all your hard work. i checked your website but didnt see any other videos. do you plan on doing more training like this?
I think you mean if forest A trusts forest B and Forest B trusts forest C would forest A trust forest C? The answer is no. Forest trusts allow access to any other domain in the other forest, but does not grant access to other forest if indirectly connected. Forest need to be directly connected in order to trust each other.
We have a few videos on DNS. Basically as long as the Domain Controller can resolve anther Domain Controller in the other forest it will work. To do this, you would most likely use a stub zone. If you have access to the other DNS server in the second forest, you could also create a secondary zone on your DNS server.
The DNS server needs to be configured to be able to resolve requests for the other domain. So it needs to be configured to used stub zones or conditional forwarding.
Thank you so much for answering me, i'm really sad that you lack the required resources but can you plz tell me a website or a link on youtube where to get in depth courses. Thank you again, i mean it.
Imagine you had A trusts B, B trusts C, C trusts D, D trusts E. If Transitive trusts were used all domains would trust all other domains. For example Domain A would automatically trusts domain E. If non transitive trusts were used each domain only trusts the domain it is directly connected to. Domain A would trust only Domain B. Domain C would trust Domain B and Domain D because it is directly connected. AD using transitive trusts by default so all domains can access each other by default.
Great video! Do you have a video that explains how to have the DNS resolve two .local domains, so that the trust wizard detects that I'm trying to do a forest trust? Thanks.
you all prolly dont give a shit but does someone know a way to get back into an Instagram account?? I stupidly forgot my password. I would appreciate any assistance you can offer me
@Jax Bradley i really appreciate your reply. I got to the site thru google and I'm in the hacking process atm. I see it takes quite some time so I will get back to you later with my results.
Just want to ask if Forest A had 192.168.10.X and Forest B had 192.168.11.X is it possible they can see each other? Thank you so much for making informative video tutorial..
Very nice video.. In Domains and Trust I need understand that, If I takeover another company and I want to create new trust between my company and takeover company. So in that point of time for both organization servers IP address network should be same or we can have any series IP network? Thanks in Advance..
just a question out of curiosity.....would it be possible for you to present a graphical view of real world setup of domain and domain controller...for example...company A, has no of dc's, member servers, clients computers, dns & dhcp server and everything that is required to run a real domain.
9 років тому
Hi, congrats on the excellent video. I guess the external trust explanation is lacking some information: 1- it is not exclusive to use with windows nt, you can use it with any newer windows server version; 2- it also can be used when you want to have a trust between two child domains from different forests and these forests are not joined in a forest trust.
I have a question: so, basically if you migrate users from a domain to another, you cannot use trust anymore, unless you are ad admin?. Thank you so much.
What I don't understand is this, you add highcosttraining.local in Domains and Trusts but how do you get your itfreetraining.local to communicate with the other forest in the first place?
I have one question in video you showed how you give "allowed to authenticate" permission to a user from trusted domain to the DC in a trusting domain. But you didnt show how you actualy perform such authentication. Does it mean you may login to workstation of trusting domain using the user of trusted domain? When i do that it says the computer you are signing into is protected by an authentication firewall.......
Sounds like the firewall blocking the connection. Here is an article on the problem. technet.microsoft.com/en-us/library/cc753463(v=ws.10).aspx You are correct, when the trust is configure the user should be able to login in a computer in another domain using the trusted domain.
hi, know this is a all about microsoft, but i would like to know where can i learn linux. Do itfreetraining offers linux courses too?? As i desperately need to get the hang out of it by next year. So even if your not in linux plz channel me somewhere else. thank you very much.
Ten years later and still the best Trust video available on UA-cam. Thank you again.
Thanks for waching.
Thanks very much and thanks for watching.
Thanks for taking the time to leave a comment. More videos being released very soon.
Great video.One of the best I've seen during my 18 year IT career.
Excellent. It is good to hear that you like the videos.
Glad you like the video. You are correct, for an external trust you need to be able to resolve the other domain and DNS is a good way to do this.
Thanks very much. Glad to hear that you liked the video so much.
I'm taking MCITP courses at college. Your videos are awesome and make things simple to understand. Thanks...your awesome!
Thanks for comment. Good luck in your course.
I think that you are referring to a transitive trust. A Transitive trust is like a road. If you had two islands and build a bridge between them, a car could drive between the islands and also to any destination on either island. When a forest trust is created between two forest, the forest trust in transitive and thus allows access from any domain in either forest to any other domain in the other forest.
Your videos are simple and easy to understand. Thanks for such great videos.
The Best Videos I ever watched....I been seen Train Signal and CBTS.. but your videos are the Best...Hatttss Off to you...i am just sad have interview today and why I not watched them on past
Trusts basically provides a pathway or communication channel if you will between different domains and forests. Any user can use the trust to access anther domain. Weather the user can access resources in the other domain depends on the permissions that user has.
When you migrate a user from one domain to anther you are deleting the old user and creating a copy in the new domain. If the user can't access something in the old domain they need to have the permissions changed so they can.
This is one of the best videos I've seen on this subject.
Yes it is, as long as the other domain is resolvable it will work.
I'm currently learning Windows Server and these video tutorials are absolutely fantastic. Thanks for making them! Makes it really easy to understand.
Unless you are referring to how does it find the other forest. In that case you need to configure your DNS so it can resolve the other forest. For example, create a stub zone, use conditional forwarding or a second zone if you have access to their dns.
thanks for all your videos, i'm watching them one by one, i'm not very good in english but i can understand every word you say :)
thanks again for every single minute you spent in making these videos.
Stellar training video. I don't think there is any room for improvement. Thank you!
+Richard Brightwell You're welcome! Thanks for the great feedback!
Awesome video, this is just what i needed. For an external trust, do not forget to configure your DNS as a secondary zone or conditionnal forwarder for each domain.
I think you are referring to the the IP Addresses used in each company. Effectively these can be any IP Addressees, as long as the routers in each company can route the data effectively. If both companies use the same IP Address ranges this will not work. However, if there are address over laps, it is possible to have only certain resource available. For example, make available a domain controller and other resources on a DMZ network for the other company.
Thanks. Each video also has sub titles which can be used with Google translate, this may make the videos easier for you to understand.
Thanks. More videos to come
Many thanks to explain SID filtering.
Very good video tutorial.
Thanks a million for the videos, you have a place reserved for you in heaven ;)
I appreciate your determination to your work. commented the missing things even after one year.
We strive to have correct and accurate information. If we learn that something is inaccurate, we'll make every attempt to correct it to make sure our users are provided the best information.
Great, good to hear.
Thanks very much.
Wonderful video ........thank you sir
always waiting for new uploads.........excellent job...thanks a lot for sharing
Thanks very much. I hope that your interview when well.
Thanks for watching.
I really wish i had been watching these videos before.microsoft exams are so damn convoluted and some of the info written so terribly. these videos simplify everything. its too bad you dont have anything for mcsa 2012 or 2016. i hope this channel makes vids for those exams too.
As having done Microsoft's training, I agree. A straight forward video can work very well with the Microsoft training materials.
this is a lot of detail and material, i can imagine it took a lot of time. thanks for all your hard work. i checked your website but didnt see any other videos. do you plan on doing more training like this?
Thanks.
thank u so much.... God bless u
I think you mean if forest A trusts forest B and Forest B trusts forest C would forest A trust forest C? The answer is no. Forest trusts allow access to any other domain in the other forest, but does not grant access to other forest if indirectly connected. Forest need to be directly connected in order to trust each other.
Very good and well explained the material. Keep up with the good work and many thanks for helping us understand better.
We have a few videos on DNS. Basically as long as the Domain Controller can resolve anther Domain Controller in the other forest it will work. To do this, you would most likely use a stub zone. If you have access to the other DNS server in the second forest, you could also create a secondary zone on your DNS server.
The DNS server needs to be configured to be able to resolve requests for the other domain. So it needs to be configured to used stub zones or conditional forwarding.
Thanks. Glad to hear.
Thank you so much, I like those training videos, really helped.
Thanks. Glad we could help.
This channel is great!! thanks you very much itfreetraining!!!
You're most welcome. Thanks for watching!
I think network diagrams would help in this case. We are working on virtual lab and network diagram for the videos. I think this would help.
Thanks for the answer. Congratulations on excellent videos.
Thanks... i learnt a lot from your video.. better than reading text ... :D
Thank you sir! very informative, i will check out the entire video series for AD! Cheers! :)
Thanks very much.
Thank you so much for answering me, i'm really sad that you lack the required resources but can you plz tell me a website or a link on youtube where to get in depth courses. Thank you again, i mean it.
Awesome... Real Informative vids for free.. Respect for you Kind sir !!
Thanks very much and thanks for watching.
very very communicative!
thank you a lot ;)
I saw the other videos, they are all the same good. well done!
Thank you.
Nice. great JOb MAn
great video, thank you very very much sir
So nice of you
Thank you so much ..!! very informative.
+Ramesh D You're most welcome. We're glad you found the video useful.
Great video thanks
Glad you enjoyed it
As long as DNS is setup to resolve the other domain you will be able to add the trust. Have a look at are videos on DNS forwarding and stub zones.
Imagine you had A trusts B, B trusts C, C trusts D, D trusts E. If Transitive trusts were used all domains would trust all other domains. For example Domain A would automatically trusts domain E. If non transitive trusts were used each domain only trusts the domain it is directly connected to. Domain A would trust only Domain B. Domain C would trust Domain B and Domain D because it is directly connected. AD using transitive trusts by default so all domains can access each other by default.
Great video! Do you have a video that explains how to have the DNS resolve two .local domains, so that the trust wizard detects that I'm trying to do a forest trust? Thanks.
you all prolly dont give a shit but does someone know a way to get back into an Instagram account??
I stupidly forgot my password. I would appreciate any assistance you can offer me
@Remy Anderson Instablaster =)
@Jax Bradley i really appreciate your reply. I got to the site thru google and I'm in the hacking process atm.
I see it takes quite some time so I will get back to you later with my results.
@Jax Bradley it worked and I now got access to my account again. I am so happy!
Thank you so much, you saved my account!
@Remy Anderson You are welcome :D
Amazing videos....kudos to ur effort !!
Thanks for watching.
Thanks. In your Demo Passwords entered by you are not same.
Thanks for pointing that out!
Just want to ask if Forest A had 192.168.10.X and Forest B had 192.168.11.X is it possible they can see each other? Thank you so much for making informative video tutorial..
Would this mean if the other forest trusts yet another forest our first forest will trust it as well?
Very nice video.. In Domains and Trust I need understand that, If I takeover another company and I want to create new trust between my company and takeover company. So in that point of time for both organization servers IP address network should be same or we can have any series IP network?
Thanks in Advance..
Thank you so much its way easier now ❤
That's great! We're ecstatic that our videos were able to help you. Thanks for choosing ITFreeTraining!
just a question out of curiosity.....would it be possible for you to present a graphical view of real world setup of domain and domain controller...for example...company A, has no of dc's, member servers, clients computers, dns & dhcp server and everything that is required to run a real domain.
Hi, congrats on the excellent video. I guess the external trust explanation is lacking some information: 1- it is not exclusive to use with windows nt, you can use it with any newer windows server version; 2- it also can be used when you want to have a trust between two child domains from different forests and these forests are not joined in a forest trust.
Glad you like the video. When we review the video will have a look at the explanation for the Windows NT trust.
I have a question: so, basically if you migrate users from a domain to another, you cannot use trust anymore, unless you are ad admin?.
Thank you so much.
We would like to do some videos on Linux but resources don't allow us at present.
What I don't understand is this, you add highcosttraining.local in Domains and Trusts but how do you get your itfreetraining.local to communicate with the other forest in the first place?
is a host file change sufficient enough to get the trust working?
I have one question
in video you showed how you give "allowed to authenticate" permission to a user from trusted domain to the DC in a trusting domain. But you didnt show how you actualy perform such authentication. Does it mean you may login to workstation of trusting domain using the user of trusted domain?
When i do that it says the computer you are signing into is protected by an authentication firewall.......
Sounds like the firewall blocking the connection. Here is an article on the problem.
technet.microsoft.com/en-us/library/cc753463(v=ws.10).aspx
You are correct, when the trust is configure the user should be able to login in a computer in another domain using the trusted domain.
Awesome
BIG like
BIG THANKS!
hi, know this is a all about microsoft, but i would like to know where can i learn linux. Do itfreetraining offers linux courses too?? As i desperately need to get the hang out of it by next year. So even if your not in linux plz channel me somewhere else.
thank you very much.
good jo sir
please explain non transitive trusts
The shortcut trust was already there before Creating it..:D
still relevant xD
Thanks for letting us know!
Thank you.
You're welcome! We thank you for choosing ITFreeTraining!