Transitive trusts configuration between three Forests

JBINET 21 Reputation points
2022-08-11T08:27:28.967+00:00

Hello World,
I need your help configuring trusts in this specific scenario :

SOURCE :

  • Users are in a mono-domain forest USERS.SOURCE
  • Servers are in a mono-domain forest SERVERS.SOURCE

TARGET :

  • Users and servers in a mono-domain forest MIGRATED.TARGET

TRUSTS :

  • Existing trusts between two source forests with enabled Quarantine (Yes) and disabled EnableSidHistory (No)

Migrated Users from USERS.SOURCE to MIGRATED.TARGET must still be able to access resources in SERVERS.SOURCE with their USERS.SOURCE HistorySID.
How should I configure trusts relationships between all three forests ?
I'd say I have to configure full transitive trusts between each of them with EnableSidHistory (Yes) and without Quarantine (No)...

Thanks in advance for your advices ;)

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,245 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Andreas Baumgarten 104K Reputation points MVP
    2022-08-11T11:58:24.15+00:00

    Hi @JBINET ,

    I would agree with this: I'd say I have to configure full transitive trusts between each of them with EnableSidHistory (Yes) and without Quarantine (No)...

    ----------

    (If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

    Regards
    Andreas Baumgarten

    0 comments No comments

  2. Limitless Technology 39,516 Reputation points
    2022-08-11T14:44:26.943+00:00

    Hello JBINET,

    You can easily migrate the SIDHistory with the users using ADMT tool from Microsoft. This way the users will keep their permissions on the Trusted Forest.

    Here is an article that describes the operation and things to take in consideration using ADMT: https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/inter-forest-sidhistory-migration-with-admt

    --------------------------------------------------------------------------------------------------------------------------------------------------------------

    --If the reply is helpful, please Upvote and Accept as answer--

    0 comments No comments