Trust between two domains

Question

I Have a requirement to establish trust between two Domains part of different network. Domain A users to be authenticated in Domain B systems using their computer resources. Only a group of people in domain A needs authentication. One way Trust only. Both Domain A and Domain B have Azure Active Directory with cloud sync to on Prem AD.

Looking for your guidance and detailed steps if possible for a solution here.

Answer 1

Hello

To establish a one-way trust between two domains, Domain A and Domain B, you can create a forest trust. This will allow users in Domain A to be authenticated in Domain B systems using their computer resources. Here are the steps you can follow to create a one-way forest trust:

1.Open Active Directory Domains and Trusts on the domain controller of Domain A.

2.In the console tree, right-click the domain node for the forest root domain of Domain A, and then click Properties.

3.On the Trusts tab, click New Trust, then click Next.

4.On the Trust Name page, type the DNS name (or NetBIOS name) of Domain B, and then click Next.

5.On the Trust Type page, select Forest trust, then click Next.

6.On the Direction of Trust page, select One-way:incoming. This means that users in Domain B will not be able to access any resources in Domain A.

7.Continue through the wizard to create the trust.

You mentioned that both Domain A and Domain B have Azure Active Directory with cloud sync to on-premises AD. It’s important to note that Azure AD DS only supports one-way transitive trusts where the managed domain will trust other domains, but no other directions or trust types are supported.

I hope this helps!