Transitive trusts configuration between three Forests

Question

Hello World,
I need your help configuring trusts in this specific scenario :

SOURCE :

• Users are in a mono-domain forest USERS.SOURCE
• Servers are in a mono-domain forest SERVERS.SOURCE

TARGET :

• Users and servers in a mono-domain forest MIGRATED.TARGET

TRUSTS :

• Existing trusts between two source forests with enabled Quarantine (Yes) and disabled EnableSidHistory (No)

Migrated Users from USERS.SOURCE to MIGRATED.TARGET must still be able to access resources in SERVERS.SOURCE with their USERS.SOURCE HistorySID.
How should I configure trusts relationships between all three forests ?
I'd say I have to configure full transitive trusts between each of them with EnableSidHistory (Yes) and without Quarantine (No)...

Thanks in advance for your advices ;)

Answer 1

Hi @JBINET ,

I would agree with this: I'd say I have to configure full transitive trusts between each of them with EnableSidHistory (Yes) and without Quarantine (No)...

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Answer 2

Hello JBINET,

You can easily migrate the SIDHistory with the users using ADMT tool from Microsoft. This way the users will keep their permissions on the Trusted Forest.

Here is an article that describes the operation and things to take in consideration using ADMT: https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/inter-forest-sidhistory-migration-with-admt

--------------------------------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--