Trust relationships in / between Forrest domains

The trusts have several trust types:

1. Child trust

When you add a child domain to an existing domain tree, by default, a bidirectional transitive child trust is established.

migRaven recognizes the domains and subdomains. Because the domain administrators can have access rights to the entire domain migRaven recognize and read the domains and subdomains.

2. Forest trust

In a forest, a trust relationship is established between two domains.
If this is bidirectional and without SID filtering, the domain administrators of one domain can also administer the other domain.

migRaven recognizes both domains and can read in both domains.

3. External trust

An external trust behaves differently than a forest trust.
This trust is by default SID-filtered. Therefore, administrators of one domain may authorize accounts of the other domain in their domain, but have no administrator rights in the other domain.

migRaven As of version 2.1.1057, it recognizes external trust relationships and displays these domains after the program starts. In order to be able to read domains connected via external trust relationships, additional access rights to these domains are required. We recommend the account with which you log in to migRaven want to register to give full access rights to the root of the external domain to be scanned. To do this, you must log on to the external domain as the domain administrator and give the domain administrator of the main domain you want to work with full access to the root of the external domain.

Vertrauensstellung_extern

Permanent link to this post: https://help.migraven.com/vertrauensstellungen/