Windows 2000 Administration in a Nutshell

Name

Active Directory Domains and Trusts — G,H,PP

Synopsis

Administers various aspects of domains and trusts.

Description

Active Directory Domains and Trusts is used for managing external trusts between domains (including trusts with Windows NT domains), changing the mode of a domain from mixed to native, and specifying alternative UPN suffixes for domains. These are important issues, but you won’t use this tool very often in your day-to-day administration of Windows 2000.

Active Directory Domains and Trusts performs similar functions to those provided by the Windows NT administrative tool called User Manager for Domains (but of course, it also supports additional functions that are new to Windows 2000).

Using Active Directory Domains and Trusts

You can access Active Directory Domains and Trusts by either:

• Start → Programs → Administrative Tools → Active Directory Domains and Trusts

• Installing the Active Directory Domains and Trusts snap-in into a new or existing console.

The console tree for this tool displays the various domains and trees in the forest. A typical console tree looks like this:

Active Directory Domains and Trusts Forest root domain (root domain of first tree) Child domain Child domain . . .  Root domain of next tree . . . 

Child domains can be nested to any level in the tree—not just level two as displayed earlier. The console tree here shows the hierarchy of domains and trees in the forest for your enterprise. See Active Directory, domain, domain controller, forest, tree ...