Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

How does a cross-forest trust work?

April 26, 2017cross-forest Trust

0

Posted

How does a cross-forest trust work?

1 Answer

0

Posted

A cross forest trust consists primarily of a shared secret (associated with a trustedDomain object) between forests, and some mapping information which enables DCs to refer requests with certain UPN or SPN suffixes to the appropriate domain. See the section on cross forest logon for more detail. Also of note is that in addition to the information needed to issue Kerberos referrals, a forest trust can be leveraged like a downlevel trust (NTLM) when needed.