Đang chuẩn bị liên kết để tải về tài liệu:
Microsoft press windows server 2008 active directory resource kit - part 2

miền tin tưởng miền NA.ADatum.com, và miền EMEA.ADatum.com tin tưởng miền ADatum.com, sau đó bắc có nghĩa là các miền EMEA.ADatum.com cũng tin tưởng miền NA.ADatum.com. Vì vậy, người sử dụng trong lĩnh vực NA.ADatum.com có thể truy cập tài nguyên trong lĩnh vực EMEA.ADatum.com và ngược lại. | Chapter 2 Active Directory Domain Services Components 53 domain trusts the NA.ADatum.com domain and the EMEA.ADatum.com domain trusts the ADatum.com domain then transitivity means that the EMEA.ADatum.com domain also trusts the NA.ADatum.com domain. Therefore users in the NA.ADatum.com domain can access resources in the EMEA.ADatum.com domain and vice versa. The transitive trusts also apply to the tree root trusts. The NA.ADatum.com domain trusts the ADatum.com domain and the ADatum.com domain trusts the TreyResearch.com domain. Therefore the NA.ADatum.com domain and the TreyResearch.com domain also share a transitive-trust relationship. Shortcut Trusts In addition to the automatic two-way transitive trusts that are created when a new child domain is created shortcut trusts can be created between domains in the forest. Shortcut trusts are used to optimize performance when accessing resources between domains that are connected through transitive trusts. A shortcut trust is desirable when there is frequent resource access between domains that are remotely connected through the domain tree or forest. For example the trusts at A. Datum could be configured as illustrated as Figure 2-10. ADatum Forest EMEA.ADatum.com Parent-child trust Research.EMEA.ADatum.com Forest Trust WoodgroveBank Forest ADatum.com NA.ADatum.com Shortcut trust Sales.NA.ADatum.com WoodgroveBank.com Figure 2-10 Trusts in the ADatum forest. If a security group in the Research.EMEA.ADatum.com domain has a frequent need to access a shared resource in the Sales.NA.ADatum.com domain and with only transitive trusts established between the domains users in the Research.EMEA.ADatum.com domain must be referred to a domain controller in every domain in the tree between them and the domain that contains the resource. This is not efficient if the need is frequent. A shortcut trust is a direct trust that will efficiently enable users in the Sales.EMEA.ADatum.com domain to be referred to a domain controller in the