Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We run SharePoint 2007 in our envirnoment and currently have a non-transitive, external trust setup between the two domains because were planning on migrating to SharePoint 2010. Our SQL Server is in the domain 2, while domain 1 has the front end web servers. We have setup a SharePoint 2010 instance but are using NTLM, I'd like to change that to use Kerberos but having a hard time finding specific information on setting it up between the two seperate forest domains. Don't get me wrong there's a lot out there, its just informational overload and was hoping someone might be able share any experinces they've had with a simliar setup and/or point me to some specific doc, blog, or whatever they've used and works.


share|improve this question
What is your AD level? – 84104 Aug 20 '11 at 1:36
Both Domains are at 2003 – Bob Aug 25 '11 at 14:46

Surprisingly, I've found the best documentation was from microsoft. The O'Reilly book on Kerberos also has an Advanced topics section on kerberos trusts, but things have changed in the 8 years since it was published.

Basically, make sure all windows boxes know about both domains. They'll know about the forest they're on, but a reg key can let them know about the other.

share|improve this answer
That doc talks about "Configure the UNIX host". We do not have any Unix host, all machines are 2003, with a couple of 2008 boxes. I haven't read all the way through it yet, hopefully its in there somewhere.. Thanks. – Bob Aug 25 '11 at 14:49
There should be a AD GUI admin tool for you then, but worst case scenario you can probably set it up manually. – jldugger Aug 25 '11 at 17:42

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.