Used to establish a link between authentication systems of two Forests or two Domains in AD.
It allows users to access or administer a Domain outside the ones that their account resides in.
Relationships
A trust can establish several types of authentication links.
Transitivity
Transitive trust: A trust that extends to Objects that the child Domain trusts.Non-transitive trust: Only the child domain itself it trusted.
Direction
Birectional trust: Users from both trusted Domains can access resources.One-way trust: Only users in trusted Domain can access resources in a trusting Domains and not vice versa. The direction of trust is opposite the direction of access.
Types
Parent-child: Domains within the same Forest, where the child-domain has a two-way transitive trust with the parent-domain.Cross-link: A trust between child Domains to speed up authentication.External: A non-transitive trust between two separate Domains in separate Forests which are not already joined by a Forest trust. This type utilise SID filtering.Tree-root: A two-way transitive trust between a Forest root Domain and a new tree root Domain within a Forest.Forest: A transitive trust between two Forest Domains.
Examples
