Even if I might seam like a real Linux guy sometimes, I still work with Windows based networks alot, at work we have alot of Windows servers and we use Active Directory to authenticate the users and group policies to control our Windows environment. A question I’ve been working with more than one time is creating trusts between different Active directory forests. Brian M Posey answers this question in a clear way in his article at Windows Networking. Quote from the article:
"One of the Windows Server 2003 features that I
think is the most under utilized is the forest level trust. As the name
implies, a forest level trust is a trust between two separate forests,
through which every domain trusts every other domain. There are lots of
reasons why you might want to create forest level trusts. There are so
many reasons in fact, that I could probably dedicate an entire article
to the subject.
One of the most common uses of forest level trusts
has to do with corporate acquisitions. For example, if your company
were to purchase another company, you might want to create a forest
level trust between the two networks until you can eventually merge the
networks together."
