3

I have an external trust in place between two Active Directory domains in two different forests (one of them Windows Server 2008 R2, the other one Windows Server 2003); but I need the trust to be a forest trust, because this is what System Center Data Protection Manager needs in order to backup servers between different domains.

Is there anyway to modify the type of the existing trust without deleting it?

If deleting and re-creating the trust is actually a requirement, will this create any problem in resource access (user/group mappings, ACLs, etc.) once the trust gets established again?
Blocking cross-domain access for a couple of minutes is not a problem, but having to re-configure anything would be a big one.

Improve this question
4
  • 1
    I won't post this as an answer, simply because you can google the same as I...social.technet.microsoft.com/Forums/en-US/winserverDS/thread/… – TheCleaner Apr 30 '12 at 18:32
  • I googled. Really. You had better luck than me :-) – Massimo Apr 30 '12 at 22:08
  • 2
    Or, as someone once said, "your Google-fu is stronger"... – Massimo Apr 30 '12 at 22:08
  • 1
    @TheCleaner, I'd like to accept an answer here, but I don't want to post one myself, since you actually found it; if you move that comment to an answer, I'm accepting it. – Massimo May 1 '12 at 10:31
2

Try this TechNet thread: Convert External Trust to Forest level trust (Archived here.):

There will be no change in permission the rights will not change.You need to delete the existing external trust and create new forest trust.

No, rights should not be removed, since you have DNS in place. Create a forest trust and remove external trust.

Links

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.