Updated: July 10, 2020 (March 17, 2003)

  Charts & Illustrations

Active Directory Cross-Forest Trust

My Atlas / Charts & Illustrations

287 wordsTime to read: 2 min
Michael Cherry by
Michael Cherry

Michael analyzed and wrote about Microsoft's operating systems, including the Windows client OS, as well as compliance and governance. Michael... more

Two or more moderately complex Active Directory (AD) “forests” can be linked so that users in one forest can easily access resources in the other forest. In this case involving fictitious example companies, ABC Limited has acquired XYZ Corporation.

Both firms were using Windows Server 2003–based AD forests before the acquisition. ABC is a Canadian firm with a U.S. subsidiary. ABC has three domains (represented by triangles) in its tree-a root domain, abc.com, and two subsidiaries. All are linked by native AD two-way transitive trusts (represented by solid connecting lines). Its U.S. subsidiary, abcus.com, has a separate tree consisting of a main domain and a separate domain for its software development group. This tree and the abc.com tree mutually trust each other (also using native AD two-way transitive trusts), but each tree has a different namespace. Because of the transitive trusts, all domains in the ABC forest completely trust each other and share a common schema and global catalog.

Atlas Members have full access

Get access to this and thousands of other unbiased analyses, roadmaps, decision kits, infographics, reference guides, and more, all included with membership. Comprehensive access to the most in-depth and unbiased expertise for Microsoft enterprise decision-making is waiting.

Membership Options

Already have an account? Login Now

Updated: July 12, 2020 (July 22, 2002)

  Charts & Illustrations

Active Directory Cross-Forest Trust

My Atlas / Charts & Illustrations

287 wordsTime to read: 2 min

Two or more moderately complex Active Directory (AD) “forests” can be linked so that users in one forest can easily access resources in the other forest. In this case involving fictitious example companies, ABC Limited has acquired XYZ Corporation.

Both firms were using .NET Server–based AD forests before the acquisition. ABC is a Canadian firm with a U.S. subsidiary. ABC has three domains (represented by triangles) in its tree-a root domain, abc.com, and two subsidiaries. All are linked by native AD two-way transitive trusts (represented by solid connecting lines). Its U.S. subsidiary, abcus.com, has a separate tree consisting of a main domain and a separate domain for its software development group. This tree and the abc.com tree mutually trust each other (also using native AD two-way transitive trusts), but each tree has a different namespace. Because of the transitive trusts, all domains in the ABC forest completely trust each other and share a common schema and global catalog.

Atlas Members have full access

Get access to this and thousands of other unbiased analyses, roadmaps, decision kits, infographics, reference guides, and more, all included with membership. Comprehensive access to the most in-depth and unbiased expertise for Microsoft enterprise decision-making is waiting.

Membership Options

Already have an account? Login Now