cise 3.

3
Creating a Forest Trust
Prerequisites: To perform this exercise, you must first have two servers running
Windows Server 2008 that have een e!evated to domain contro!!ers in their own
respective forests. "n this exercise, there are two forests with their root domains named
domain.com and domain2.com. #or this exercise, you wi!! e executing the commands
from the domain.com domain.
1. $a%e sure you are !ogged in as either a domain or enterprise administrator.
2. &ccess the '(S manager y se!ecting Start ) &dministrative Too!s ) '(S.
3. *xpand your '(S server, and se!ect +onditiona! #orwarders.
4. ,ight-c!ic% the whitespace to the right, and se!ect (ew +onditiona! #orwarder. "t wi!!
open the dia!og ox shown here.
5. "n the '(S 'omain fie!d, type domain2.com.
6. Se!ect the +!ic% .ere To &dd &n "/ &ddress 0r '(S (ame text, and enter the "/
address
of the domain2.com server.
7. Se!ect Store This +onditiona! #orward "n &ctive 'irectory.... &!so ensure that &!!
'(S
Servers "n This #orest is se!ected.
8. +!ic% 01.
9. ,epeat this process on the domain2.com, ut point the '(S conditiona! forwarder to
the domain.com domain.
10. 0pen the &ctive 'irectory 'omains &nd Trusts too! y se!ecting &dministrative
Too!s )
&ctive 'irectory 'omains &nd Trusts.
11. ,ight-c!ic% domain.com, and se!ect /roperties.
12. Se!ect the Trusts ta, as shown here.
13. Se!ect (ew Trust, and then c!ic% (ext. *nter domain2.com in the (ame ox.
14. Se!ect the #orest Trust radio utton, and then c!ic% (ext.
15. Se!ect Two-Way, ecause this wi!! e a two-way trust.
16. When the next screen appears, se!ect the 2oth This 'omain and the Specified
'omain radio utton. This wi!! a!!ow you to create the trust on oth the domain.com
domain and the domain2.com domain, which means you don3t have to repeat the
process. &fterward, c!ic% (ext.
17. When prompted for credentia!s, enter the username and password of an account
on
the domain2.com server that is authori4ed to create a trust. & safe et is an account
in the enterprise administrator group.
18. Se!ect the #orestwide &uthentication utton when as%ed aout po!icies in the target
forest, and then c!ic% (ext. &!ternative!y, at this point you can se!ect individua!
access to each domain and server that you want to ma%e avai!a!e with the Se!ective
&uthentication utton.
19. Se!ect the #orestwide &uthentication utton when as%ed aout po!icies in the local
forest, and then c!ic% (ext. &!ternative!y, at this point you can se!ect individua!
access to each domain and server that you want to ma%e avai!a!e with the Se!ective
&uthentication utton.
20. +!ic% (ext on the summary screen.
21. +!ic% (ext on the confirmation screen.
22. 0n the next two screens, se!ect the radio uttons to confirm the forest trust, and
then
c!ic% #inish.
23. 5ou can test your forest trust y accessing the &ctive 'irectory 'omains &nd
Trusts
too! once again, right-c!ic%ing the &ctive 'irectory 'omains &nd Trusts section aove
the domain.com name, and se!ecting +hange #orest. Then, enter the domain2.com
domain name, and you wi!! see the domains swap. "t3s a very rewarding fee!ing.