MCITP 70-640: Active Directory Trusts

[@divebomb99]

Ten years later and still the best Trust video available on KZbin. Thank you again.

[@itfreetraining]

Thanks for waching.

[@Chimpwhich]

Great video.One of the best I've seen during my 18 year IT career.

[@itfreetraining]

Thanks very much and thanks for watching.

[@vivekmishra20]

The Best Videos I ever watched....I been seen Train Signal and CBTS.. but your videos are the Best...Hatttss Off to you...i am just sad have interview today and why I not watched them on past

[@frankhayden295]

I'm taking MCITP courses at college. Your videos are awesome and make things simple to understand. Thanks...your awesome!

[@itfreetraining]

Excellent. It is good to hear that you like the videos.

[@itfreetraining]

Thanks for taking the time to leave a comment. More videos being released very soon.

[@MarshallAdel]

thanks for all your videos, i'm watching them one by one, i'm not very good in english but i can understand every word you say :) thanks again for every single minute you spent in making these videos.

[@itfreetraining]

Glad you like the video. You are correct, for an external trust you need to be able to resolve the other domain and DNS is a good way to do this.

[@alphabanks]

This is one of the best videos I've seen on this subject.

[@Santosh2730]

Your videos are simple and easy to understand. Thanks for such great videos.

[@itfreetraining]

Thanks for comment. Good luck in your course.

[@stephane1234567]

Awesome video, this is just what i needed. For an external trust, do not forget to configure your DNS as a secondary zone or conditionnal forwarder for each domain.

[@iSimx]

I'm currently learning Windows Server and these video tutorials are absolutely fantastic. Thanks for making them! Makes it really easy to understand.

[@lamok5516]

thank you - still so very much relevant.

[@itfreetraining]

Thanks very much. Glad to hear that you liked the video so much.

[@EssentialXL]

Thanks a million for the videos, you have a place reserved for you in heaven ;)

[@ciscodoctor]

always waiting for new uploads.........excellent job...thanks a lot for sharing

[@itfreetraining]

I think that you are referring to a transitive trust. A Transitive trust is like a road. If you had two islands and build a bridge between them, a car could drive between the islands and also to any destination on either island. When a forest trust is created between two forest, the forest trust in transitive and thus allows access from any domain in either forest to any other domain in the other forest.

[@RichardBrightwell]

Stellar training video. I don't think there is any room for improvement. Thank you!

[@itfreetraining]

+Richard Brightwell You're welcome! Thanks for the great feedback!

[@itfreetraining]

Thanks. Each video also has sub titles which can be used with Google translate, this may make the videos easier for you to understand.

[@itfreetraining]

Unless you are referring to how does it find the other forest. In that case you need to configure your DNS so it can resolve the other forest. For example, create a stub zone, use conditional forwarding or a second zone if you have access to their dns.

[@mathewnet123]

I appreciate your determination to your work. commented the missing things even after one year.

[@itfreetraining]

We strive to have correct and accurate information. If we learn that something is inaccurate, we'll make every attempt to correct it to make sure our users are provided the best information.

[@itfreetraining]

Trusts basically provides a pathway or communication channel if you will between different domains and forests. Any user can use the trust to access anther domain. Weather the user can access resources in the other domain depends on the permissions that user has. When you migrate a user from one domain to anther you are deleting the old user and creating a copy in the new domain. If the user can't access something in the old domain they need to have the permissions changed so they can.

[@SLewish1]

Many thanks to explain SID filtering. Very good video tutorial.

[@itfreetraining]

Yes it is, as long as the other domain is resolvable it will work.

[@fernandoenrile5904]

Thank you sir! very informative, i will check out the entire video series for AD! Cheers! :)

[@itfreetraining]

Thanks very much.

[@itfreetraining]

I think you are referring to the the IP Addresses used in each company. Effectively these can be any IP Addressees, as long as the routers in each company can route the data effectively. If both companies use the same IP Address ranges this will not work. However, if there are address over laps, it is possible to have only certain resource available. For example, make available a domain controller and other resources on a DMZ network for the other company.

[@KrishnaSharma-io4ic]

Awesome... Real Informative vids for free.. Respect for you Kind sir !!

[@itfreetraining]

Thanks very much and thanks for watching.

[@TruthSeeker7101]

Wonderful video ........thank you sir

[@Deme_Demetre]

This channel is great!! thanks you very much itfreetraining!!!

[@itfreetraining]

You're most welcome. Thanks for watching!

[@stevenxu537]

Thank you so much, I like those training videos, really helped.

[@itfreetraining]

Thanks. Glad we could help.

[@itfreetraining]

Great, good to hear.

[@MrAmolina]

Very good and well explained the material. Keep up with the good work and many thanks for helping us understand better.

[@TheUltimateRed]

very very communicative! thank you a lot ;) I saw the other videos, they are all the same good. well done!

[@yaro137]

Thanks for the answer. Congratulations on excellent videos.

[@stringsnare]

I really wish i had been watching these videos before.microsoft exams are so damn convoluted and some of the info written so terribly. these videos simplify everything. its too bad you dont have anything for mcsa 2012 or 2016. i hope this channel makes vids for those exams too.

[@itfreetraining]

As having done Microsoft's training, I agree. A straight forward video can work very well with the Microsoft training materials.

[@stringsnare]

this is a lot of detail and material, i can imagine it took a lot of time. thanks for all your hard work. i checked your website but didnt see any other videos. do you plan on doing more training like this?

[@itfreetraining]

We have a few videos on DNS. Basically as long as the Domain Controller can resolve anther Domain Controller in the other forest it will work. To do this, you would most likely use a stub zone. If you have access to the other DNS server in the second forest, you could also create a secondary zone on your DNS server.

[@itfreetraining]

Thanks. More videos to come

[@getsufuma812]

Thanks... i learnt a lot from your video.. better than reading text ... :D

[@itfreetraining]

Thanks very much.

[@itfreetraining]

I think you mean if forest A trusts forest B and Forest B trusts forest C would forest A trust forest C? The answer is no. Forest trusts allow access to any other domain in the other forest, but does not grant access to other forest if indirectly connected. Forest need to be directly connected in order to trust each other.

[@TravelScripting]

thank u so much.... God bless u

[@itfreetraining]

Thanks very much. I hope that your interview when well.

[@itfreetraining]

As long as DNS is setup to resolve the other domain you will be able to add the trust. Have a look at are videos on DNS forwarding and stub zones.

[@Raamessh]

Thank you so much ..!! very informative.

[@itfreetraining]

+Ramesh D You're most welcome. We're glad you found the video useful.

[@itfreetraining]

I think network diagrams would help in this case. We are working on virtual lab and network diagram for the videos. I think this would help.

[@itfreetraining]

The DNS server needs to be configured to be able to resolve requests for the other domain. So it needs to be configured to used stub zones or conditional forwarding.

[@itfreetraining]

Thanks for watching.

[@itfreetraining]

Thanks.

[@itfreetraining]

Thanks. Glad to hear.

[@NaNNaN-sh4vz]

great video, thank you very very much sir

[@itfreetraining]

So nice of you

[@dinero99]

Amazing videos....kudos to ur effort !!

[@itfreetraining]

Thanks for watching.

[@movetolinux8965]

Great video thanks

[@itfreetraining]

Glad you enjoyed it

[@OrkhanMammadoff]

Nice. great JOb MAn

[@itfreetraining]

Thank you.

[@itfreetraining]

We would like to do some videos on Linux but resources don't allow us at present.

[@marielleannetia5804]

Thank you so much its way easier now ❤

[@itfreetraining]

That's great! We're ecstatic that our videos were able to help you. Thanks for choosing ITFreeTraining!

[@gr8vmfan]

Great video! Do you have a video that explains how to have the DNS resolve two .local domains, so that the trust wizard detects that I'm trying to do a forest trust? Thanks.

[@remyanderson8526]

you all prolly dont give a shit but does someone know a way to get back into an Instagram account?? I stupidly forgot my password. I would appreciate any assistance you can offer me

[@jaxbradley7036]

@Remy Anderson Instablaster =)

[@remyanderson8526]

@Jax Bradley i really appreciate your reply. I got to the site thru google and I'm in the hacking process atm. I see it takes quite some time so I will get back to you later with my results.

[@remyanderson8526]

@Jax Bradley it worked and I now got access to my account again. I am so happy! Thank you so much, you saved my account!

[@jaxbradley7036]

@Remy Anderson You are welcome :D

[@sunfaceshanmugam]

Thanks. In your Demo Passwords entered by you are not same.

[@itfreetraining]

Thanks for pointing that out!

[@yaro137]

Would this mean if the other forest trusts yet another forest our first forest will trust it as well?

[@itfreetraining]

Imagine you had A trusts B, B trusts C, C trusts D, D trusts E. If Transitive trusts were used all domains would trust all other domains. For example Domain A would automatically trusts domain E. If non transitive trusts were used each domain only trusts the domain it is directly connected to. Domain A would trust only Domain B. Domain C would trust Domain B and Domain D because it is directly connected. AD using transitive trusts by default so all domains can access each other by default.

[@skelomania666]

Thank you so much for answering me, i'm really sad that you lack the required resources but can you plz tell me a website or a link on youtube where to get in depth courses. Thank you again, i mean it.

[@Nessunoscarsosegnale]

I have a question: so, basically if you migrate users from a domain to another, you cannot use trust anymore, unless you are ad admin?. Thank you so much.

[@yaro137]

What I don't understand is this, you add highcosttraining.local in Domains and Trusts but how do you get your itfreetraining.local to communicate with the other forest in the first place?

[@AwelsTech]

just a question out of curiosity.....would it be possible for you to present a graphical view of real world setup of domain and domain controller...for example...company A, has no of dc's, member servers, clients computers, dns & dhcp server and everything that is required to run a real domain.

[@BenMcDevitt]

is a host file change sufficient enough to get the trust working?

Hi, congrats on the excellent video. I guess the external trust explanation is lacking some information: 1- it is not exclusive to use with windows nt, you can use it with any newer windows server version; 2- it also can be used when you want to have a trust between two child domains from different forests and these forests are not joined in a forest trust.

[@itfreetraining]

Glad you like the video. When we review the video will have a look at the explanation for the Windows NT trust.

[@gourishmesta4063]

Very nice video.. In Domains and Trust I need understand that, If I takeover another company and I want to create new trust between my company and takeover company. So in that point of time for both organization servers IP address network should be same or we can have any series IP network? Thanks in Advance..

[@skelomania666]

hi, know this is a all about microsoft, but i would like to know where can i learn linux. Do itfreetraining offers linux courses too?? As i desperately need to get the hang out of it by next year. So even if your not in linux plz channel me somewhere else. thank you very much.

[@elik1985]

I have one question in video you showed how you give "allowed to authenticate" permission to a user from trusted domain to the DC in a trusting domain. But you didnt show how you actualy perform such authentication. Does it mean you may login to workstation of trusting domain using the user of trusted domain? When i do that it says the computer you are signing into is protected by an authentication firewall.......

[@itfreetraining]

Sounds like the firewall blocking the connection. Here is an article on the problem. technet.microsoft.com/en-us/library/cc753463(v=ws.10).aspx You are correct, when the trust is configure the user should be able to login in a computer in another domain using the trusted domain.

[@aceapostol]

Just want to ask if Forest A had 192.168.10.X and Forest B had 192.168.11.X is it possible they can see each other? Thank you so much for making informative video tutorial..

[@mysteriously01]

please explain non transitive trusts

[@AnupRai86]

Awesome

[@abhimanyusinghshekhawat6871]

The shortcut trust was already there before Creating it..:D

[@prakashvenkatraojadhav6842]

good jo sir

[@thatdudedan1715]

very gamer

[@CautionCU]

still relevant xD

[@itfreetraining]

Thanks for letting us know!

[@omarlimachicruz4728]

Thank you.

[@itfreetraining]

You're welcome! We thank you for choosing ITFreeTraining!