Windows Server 2008 and 2012 establish forest trust detailed steps

When the company grows larger, there will be multiple branches or mergers and acquisitions of other companies. This will involve multiple domains and employee work. In the case of separation, there will be a cross-domain migration of users and computers. To cross-domain migration, we first need to establish the forest trust of the two domains.

Environment Description:

contoso.com domain: windows server 2008 R2

test.com domain: Windows Server 2012

First, establish a DNS auxiliary area

1. Log in to the Windows 2012 domain, test.com, open the DNS Manager, and select the Domain-> property.

2. Open the zone transfer option, check "Allow zone transfer", and "Allow only the following servers" to add the address of the Windows 2008 contoso domain server.

3. Then log in to the contoso.com domain server and also establish a zone transfer to test.com in DNS.

4. Go back to test.com and create a new zone in the DNS forward lookup zone.

5. New Zone Wizard Select the secondary zone. Next step.

6.Enter the name of the zone for contoso.com.

7. Add the server address of contoso.com to the primary DNS server.

8. Complete the regional wizard setup.

9. In the contoso.com domain, use the same method to create a secondary area for test.com.

Second, establish a forest trust relationship

1. Log in to contoso.com, open the active directory domain and trust relationship, and open the domain properties.

2. Create a new trust in the trust options.

3. Next step.

4. Enter the test.com domain that needs to establish trust, the next step.

5. Select “林trust”

6.According to actual needs, here we choose “bidirectional<;trust

7.Select this domain and specify area.

8. Fill in the administrator and password for the test.com domain.

9. Outgoing trust, select forest-wide authentication

10. Specify forest authentication, and also select forest authentication.

11. Next step.

12. Confirm the outgoing trust.

13. Confirm incoming trust.

14. Complete the trust establishment.

15. Here you can see that the trust of the forest has been established.

16. The trust of contoso.com is also established on test.com.