Stap 3b: One-way trust

Bij het aanmaken van een trust kan er voor gekozen om na het toevoegen van gebruikers de trust om te zetten in een one-way incoming trust. Daardoor kunnen de gebruikers alleen nog maar authenticeren op het domein. Als er nieuwe gebruikers toegevoegd moeten worden zal er weer een two-way trust opgezet moeten worden.

1. Open Active Directory Domains and Trusts.

2. In the console tree, right-click the domain node for the forest root domain of the forest for which you want to establish an incoming forest trust, and then click Properties.

3. On the Trusts tab, click New Trust, and then click Next.

4. On the Trust Name page, type the Domain Name System (DNS) name of the forest root domain of the other forest, and then click Next.

5. On the Trust Type page, click Forest trust, and then click Next.

6. On the Direction of Trust page, click One-way: incoming, and then click Next.

   For more information about the selections that are available on the Direction of Trust page, see "Direction of Trust" in Appendix: New Trust Wizard Pages.

7. On the Sides of Trust page, click This domain only, and then click Next.

   For more information about the selections that are available on the Sides of Trust page, see "Sides of Trust" in Appendix: New Trust Wizard Pages.

8. On the Trust Password page, type the trust password twice, and then click Next.

9. On the Trust Selections Complete page, review the results, and then click Next.

10. On the Trust Creation Complete page, review the results, and then click Next.

11. On the Confirm Incoming Trust page, do one of the following:

    • If you do not want to confirm this trust, click No, do not confirm the incoming trust.
      
      
    • If you want to confirm this trust, click Yes, confirm the incoming trust, and then supply the appropriate administrative credentials from the specified domain.
      
      

12. On the Completing the New Trust Wizard page, click Finish.

[1] https://technet.microsoft.com/nl-nl/library/cc816731(v=ws.10).aspx