Figure Unidirectional trust relationship between two domains
When the trust is mutual, the trust relationship becomes bi-directional, or two-way. Bi-directional trust enables the users or devices in each domain to access resources in the other's domains (see Figure 3-3).
Windows NT trusts are limited by the underlying database and security technology, which endows the operating system with a less than suitable "cognitive" ability. In other words, Windows NT domains are always mistrusting; and as such, whenever two domains need to interoperate, explicit trusts must first be set up between them.
Domain A trusts Domain B trusts
Domain B Domain A
Domain A Domain B
Post a comment