change trust type between parent and child domain

Discussion in 'Active Directory' started by Florian Labs, Jan 16, 2008.

  1. Florian Labs

    Florian Labs Guest

    Hi,
    we would like to implent a child domain to our existing domain. is it
    possible to change the trustrelationship between the parent and child domain
    ?
    we prefer a one-way and not a two-way trust for our szenario

    Cheers
    Florian
     
    Florian Labs, Jan 16, 2008
    #1
    1. Advertisements

  2. Florian Labs

    Jorge Silva Guest

    Hi
    -Are you sure that you want a child domain in your existing forest?
    -Sounds to me that you need a additional forest and not a additional
    domain...
    -let's know about your objectives so we can help you better on this.

    --
    I hope that the information above helps you.
    Have a Nice day.

    Jorge Silva
    MCSE, MVP Directory Services
     
    Jorge Silva, Jan 16, 2008
    #2
    1. Advertisements

  3. Florian Labs

    Florian Labs Guest

    Hi,

    our company is software development house with one forest contains one
    domain like company.tld.
    The Domain contains productive Objects Computer User Objects e.g. for
    Management, and Development Objects e.g Virtual Servers TestAccounts are
    hosted ist one Domain too. THe Development Objects are much more than the
    Mangement Objekts
    We would like to isolate the Development Ojects in their own domain.

    We would have one DNS namespace for the company e.g. dev.corp.tld
    We would delegate gpo from parent to child domain
    If its possible we would have only a one-way trust between parent and child
    domain

    Or was is a best practise for our szenario?
     
    Florian Labs, Jan 16, 2008
    #3
  4. Florian Labs

    Ryan Hanisco Guest

    Hi Florian,

    For something like this if you are looking at isolating domain objects, you
    would probably want to look at ADAM with synchronization rather than another
    domain. If you are just looking to partition rights then there is really no
    reason you can't achieve this through OUs and security policies unless you
    truly need an absolute security boundary where you'd need a separate forest.

    Hope this helps.
    --
    Ryan Hanisco
    MCSE, MCTS: SQL 2005, Project+
    http://www.techsterity.com
    Chicago, IL

    Remember: Marking helpful answers helps everyone find the info they need
    quickly.
     
    Ryan Hanisco, Jan 17, 2008
    #4
  5. Florian Labs

    Jorge Silva Guest

    I agree with Ryan.

    --
    I hope that the information above helps you.
    Have a Nice day.

    Jorge Silva
    MCSE, MVP Directory Services
     
    Jorge Silva, Jan 18, 2008
    #5
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.