Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Suppose I have two Active Directory forests, each with one global catalog. There is a transitive trust between these forests. Does this imply that data is replicated between the two forests?

Can I perform searches on one global catalog and get results from both catalogs?

share|improve this question
add comment

2 Answers 2

up vote 2 down vote accepted

Does this imply that data is replicated between the two forests?

Yes, but not to the degree you think of. Naturally certain elements will be replicated - those that are needed to maintain a trust relationship.

But no user level data. Stuff like passwords etc. do NOT leave a forest.

Can I perform searches on one global catalog and get results from both catalogs?

No. And if you think about it, it makes sense.

For example, the schemata of both forests can be different. If one object has been extended - what would the schema on the other forest do? Trust is not about syncing data, it is about allowing security contexts to pass.

share|improve this answer
add comment

The short answer is no. There is no replication of data between global catalogs in separate forests.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.