The Best Damn Windows Server 2003 Book Period- P53:The latest incarnation of Microsoft’s server product,Windows Server 2003, brings many new features and improvements that make the network administrator’s job chapter will briefly summarize what’s new in 2003 and introduce you to the four members of the Windows Server 2003 family: the Web Edition, the Standard Edition, the Enterprise Edition, and the Datacenter Edition. | 486 Chapter 12 Working with Forests and Domains Types of Trusts Two trusts tree-root and parent and child are created by default when running the Active Directory Installation other four trusts shortcut external realm and forest can be created as needed with the New Trust Wizard or the command-line tool. When creating those four trusts you have the option of creating two one-way relationships simulating bidirectional capabilities. As with any use of passwords it is a security best practice to use long random and complex passwords in the establishment of trusts. The best option is to use the New Trust Wizard to create both sides simultaneously in which case the wizard generates a strong password for you. Naturally you must have the appropriate administrative credentials in both domains for this to work. Restructuring the Forest and Renaming Domains In Windows Server 2003 you can rename domains in an Active Directory forest after the forest structure is in was not true in the Windows 2000 Server build your Active Directory forest structure one domain at a time and the resulting relationships are the result of the order in which you create them and the DNS names you assign. Renaming domains allows you to change the forest structure. For example you can raise a child domain to be a new tree-root domain or lower a top-level domain to child status in another tree. In each case you rename an existing domain to create a different forest structure. In cases where restructuring is not your goal you can rename domains without affecting the trust relationships between domains. For example you do not create a different domain-tree structure if you rename a root domain although the names of all child domains below it are also changed. This is a complex and sweeping modification to the namespace of one or more domains. During the domain rename procedure you can change DNS and NetBIOS names but the true identity of a domain lies in its .
