Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is it possible to do delegation in a cross forest scenario with only a one way trust? I have 2 domains which are in different forests, and there is a one way trust from the resourcedomain to the userdomain. The SPN's are registered properly on the resourcedomain, but when trying to connect with a userdomain to a server in resourcedomain the protocol falls back to NTLM.

share|improve this question

1 Answer 1

Which version of windows server you are using? If its Win2000 only NTLM/External is supported to do cross forest authentication. If its win2003 and if you have created Cross-forest trust then you should be able to use kerberos. Incase if its External trust it will only do NTLM.

share|improve this answer
    
It's win2003 with External Trust. I've been trying with Protocol Transition, but it seems that it requires 2 way trust between forests. –  user59052 Nov 16 '10 at 13:02

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.