question

RockSteps-2999 avatar image
0 Votes"
RockSteps-2999 asked FanFan-MSFT commented

Authentication from Forest AD

Hello Team,

We are planning to have a single forest and 3 child domains.
But, we want the authentication to happen from the Forest only. Is this possible.

Please advise.

windows-active-directory
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

FanFan-MSFT avatar image
0 Votes"
FanFan-MSFT answered FanFan-MSFT commented

Hi,
I'm afraid i didn't understand the question clearly.
To know your question more clearly, would you please tell more detail?
If there are not trusts with other forests, the Kerberos authentication will happen in the forest.
Do you mean the Kerberos authentication within the forest?
For How the Kerberos Version 5 Authentication Protocol Works
Best Regards,

· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks for the reply. There will be a trust between child and forest doamins.

0 Votes 0 ·

Do you have 2 forest with a trust relationship?
Or you have one forest with one parent domain and 2 child domain?
Best Regards,

0 Votes 0 ·

Any updates?
Best Regards,

0 Votes 0 ·