AD Trust Winddows 2008 R2

Question

I am planning to configure two-way trust between two 2008 R2 forests - say D1 & D2, belongs to same org. I have some queries here.
1. If I enable Forest wide authentication between D1 and D2 and vice versa , will this allow users of D1 and D2 to access resources freely. For Ex: Whether a D1 user can delete user in D2 / can a D2 user be able to reset the passwords in D1?
2. Once trust is enabled will all the desktops in D1 and D2 shows , 2 domains listed in their computer login screen?

Answer 1

1. If you enable a two way forest trust with Forest-wide authentication, users will be able to access resources in the other domain provided they have the required permissions. You  also need to delegate the required rights to users in D1 to delete/reset
password in D2 or Vice Versa. Check the Link for more information on Trusts:
http://technet.microsoft.com/en-us/library/cc771568.aspx  
2. This depends on how many domains you have in each forest and what you have selected in the Name-Suffix-Routing.  If both of your forest have single domain each, then Yes,  users will see 2 domains listed at the login screens(Win xp/Windows 2003,
Higher OS will not show the domain list). But let’s say the forest D1 has 2 sub-domain and you have enabled name-suffix routing for all three domain in Forest D1, then users will see 4 domains (3 from D1 forest and 1 from D2 forest)
Routing name suffixes across forests
http://technet.microsoft.com/en-us/library/cc784334.aspx
Exclude name suffixes from routing to a local forest
http://technet.microsoft.com/en-us/library/cc758388.aspx
Hope this Helps!!!!