Active Directory Forest and Domain Trusts

Flashcards covering Active Directory Forest and Domain Trusts, trust directions, transitivity, and trust types from the Chapter 1-5 lecture.

What is a trust in Active Directory?

A trust is the type of communication between domains and forests that allows users from one domain to access resources from another domain.

What are the default characteristics of all trusts within a forest?

All trusts in a forest are two way transitive trusts by default.

What does a two way trust allow users to do?

It allows both domains to trust each other, authentication requests to go from either domain to the other, and users in either domain to access resources in the other domain.

What does transitive mean in the context of Active Directory trusts?

Transitive means to pass through or transfer, extending the trust relationship between two domains to the other transitively trusted domains in the forest.

In a one way directional trust, where does the trust path arrow point?

The arrow points to the domain that is trusted.

What is the direction of resource access in a one way directional trust?

The direction of access is from the trusted domain to the trusting domain's resources.

What is the primary benefit of a non transitive trust?

It ensures the trust relationship between two domains is not extended to other domains, which helps deny a trust relationship to protect resources.

What are automatic trusts in Active Directory?

Automatic trusts are the default two way transitive trusts created when Active Directory is installed between any child domains in a tree or between trees in the same forest.

What are the characteristics and alternative name of a forest trust?

Also called an interforest trust, a forest trust allows users from one forest to access resources in another forest; it is transitive and can be either two way or one way directional.

What is forest wide authentication in a forest trust?

It is the default authentication option in a forest trust that allows users from either forest to freely access resources from either forest.

How does selective authentication operate in a forest trust?

It limits resource access to only users from the foreign forest who have been assigned the allowed to authenticate right to that server.

What list stores all domain names from both forests when an interforest trust is established?

The name suffix routing list of the trust.

What are external trusts and what are their characteristics?

External trusts provide access from one domain to an outside domain in a forest not joined by a forest trust; they are non transitive and can be one way or two way trusts.

What type of trust creates a trusted relationship with a non Microsoft Kerberos version five Realm?

A realm trust.

What are the characteristics of a realm trust?

Realm trusts can be transitive or non transitive, and can be one way or two way directional.

Where are shortcut trusts established and what is their main function?

Shortcut trusts are established between domains in the same forest to speed up access to objects by directly connecting two domains and cutting the authentication process to one step.

In the transcript's shortcut trust example, what authentication path is avoided for CBA users accessing EDA?

Without the shortcut trust, CBA users would have to authenticate through B A, then A, then DA, and finally through EDA.