Summary Trust between computer systems, domains, and forests parallel that which we see in our own lives. When trust is enabled, we empower people and organizations to do better work. However, we also empower those who would for whatever reason cause harm. At first blush, it seems that we need to stop the widespread access that trust entails. However, the answer is not to withdraw behind the boundaries of the past but instead to expand or increase in number better controlled, trusted access. Alhough there is no risk-free way to share resources, we must use the defenses we have. Limit the trusts to only those that are necessary, within the trust limit the access to those systems that need to be shared, and on those systems have tight control over the data that is exposed. This chapter has covered in broad strokes the ways that you can implement and limit trust between domains and forests with Windows Server 2003, but it is only your diligence and expertise that will ensure the best solution for your organization. |