Forest trust - security issues and how to avoid

Hi guys,
I have few questions.
1/Planning do Forest trust.We have Forest + Domain functional level at WS 2003 level.
In case of trust what are the security issues and how to avoid them? Meant something like browsing in AD, possible hacking from new destination etc.
2/ What in case that the trust will not be possible create because of security reasons (rejected by other company)? What can be an workaround for that? I have idea with resource forest or ADFS? Any other ideas?
Thanks in advance or for a good link to study about.
Petr Weiner

Other than broad general answers it is difficult to answer this from the negative side.  I work in a very large company where we have hundreds of domains with one way trusts in place and I don't believe we have any security issues in place.  With
the large numbers of domains we can't operate in any other fashion.  We have a user forest and many resource forests.  All of our domains and forests are operated and maintained within the company but if you have domains operated by different departments
then you can run into issues on who trusts.  Also if you need to have a situation where you need to trust other companies then you start to look at ADFS, you can also use it internally for many applications as well as cloud services.  But as I already
mentioned you haven't detailed what exactly is going on so it is hard to try and give you a concrete answer.
Paul Bergson
MVP - Directory Services
MCITP: Enterprise Administrator
MCTS, MCT, MCSE, MCSA, Security, BS CSci
2012, 2008, Vista, 2003, 2000 (Early Achiever), NT4
Twitter @pbbergs http://blogs.dirteam.com/blogs/paulbergson
Please no e-mails, any questions should be posted in the NewsGroup.
This posting is provided AS IS with no warranties, and confers no rights.

Similar Messages

  • HT1338 There is a lot of talk about the Java security issues and the ability to download a patch fix, do i need to do this or will software update pick this up for me?

    There is a lot of talk about the Java security issues and the ability to download an apple patch fix, do i need to do this or will software update pick this up for me?

    Thanks for that, how do I establish if I have Java installed as on Safari preferences it indicates the following
    Web content - Enable Java
                        - Enable JavaScript

  • I have several times tried to stop following a thread in the PDF's forum about security issues and i still keep getting flooded with emails from this thread. I used the action within the thread that says stop following but appears to have no effect I stil

    I have several times tried to stop following a thread in the PDF's forum about security issues and i still keep getting flooded with  emails from this thread. I used the action within the thread that says stop following but appears to have no effect I still keep  getting from 5 to 20 emails daily. Please help!!!!!!!

    This may be helpful: How do I disable email notifications?

  • N8/C7 PURPLE SCREEN ISSUE AND HOW TO SPOT IF YOU H...

    MODS THIS IS NOT A POLL OR IN ANYWAY SHAPE OR FORM A VOTING THREAD IT IS A THREAD TO WARN USERS ABOUT THE PURPLE SCREEN ISSUE AND HOW TO SPOT IT IN THEIR PHONES CLEAR AS DAY , I HAVE BEEN INFORMED FROM THE DIRECTOR OF COMUNICATIONS AT NOKIA VIA TWITTER THAT THIS THREAD IS OK AND THE TEST IMAGE IS FINE TO LOAD UP
    The following has been added by vandelay (Nokia administrator) :
    Please note that there is normally a slight variation in the purple color level in each display
    unit. This is related to the display manufacturer's optical tuning process. However, some Nokia C7 and Nokia N8 users seem to be experiencing a
    slightly higher level of purple color tint on their device screens.
    Nokia Care's technical experts told me that the easiest way to spot this problem is to just look at the black idle screen of the device - if there is a clear purple color tint on the idle screen, you should have the device inspected at a Nokia Care point. They will repair the device the device under warranty if there is a clear defect in the device.
    So seeing some purple on the test image does not necessarily mean that your screen is faulty, but we hope that it helps some people to decide whether they should visit a Nokia Care point.
    (end of vandelay's addition)
    as you may or may not have read many n8s and c7s have a purple tint issue
    this can easily be spoted by saving the picture below to your pc , transfering it to your n8/c7 , then viewing the image in your gallery
    if the image shows purple squares in some areas then iam afraid you have one of the screens that is showing defects in gradiation of colurs and the greyscale
    there are also many n8s out in the wild that dont have this problem , i have 3 n8s , my gfriend has one , hers is perfect and shows the test image with no purple tint at all my three n8s all have purple tint and some display it worse then others
    the test image can be viewed on any brightness and it should display just as it does on your monitor screen ,my gfriends n8 displays the image perfect under all brightness levels yet my three n8s show the purple tint heavily on low brightness and not as much on full brightness
    the test image can also be viewed via tv out and hdmi out and again if you have a defect screen you will see the image perfect on your tv yet on your n8 screen you will have purple tints
    here is the test image for you to load to your device and view via the gallery
    as stated above if you have one of the screens with defects in colour gradiation you will see some of the squares as purple
    this shouldnt be happending as there n8s out there that display the test image perfectly
    from all my research on this in the last month and my time studying ICT systems support in which i have a diploma , it seems clear to me that nokia have used at least two screens in the build of the n8
    many phones bought between october launch and december dont have the problem yet there are still some that do but not as many as now , phones bought from the end of december up untill current date seem to have the issue moreand its now nearly impossible to find one without the purple tint issue
    this leads me to believe that from the start nokia were using at least two screen in the n8 , then one started to run out around december and by the end of december a huge majority of n8/c7 handsets have the troubles, if not all of them shipped after december
    infact ive been to every phone shop in lakeside , chelmsford , colchester which included : carphone warehouse , o2 , vodafone , orange , three ,  phones4u , tmobile all n8/c7 handsets i asked to look at had the problem not one n8 i looked at didnt have the issue 
    i have been in contact with nokia care escalation team , all they did is send me very badly refurbed handsets back for my brand new n8s ,  which across all three handsets had the following faults
    #hdmi covers scratched and worn
    #no imei number under the hdmi cover on one of them
    #torx screws on battery cover very worn
    #plastic top caps not fitted right
    #one had a huge gap between the silver screen surround and the main chasis of n8
    #they all still had purple tint issue
    so nokia sent me three refurbed handsets for my brand new n8s , i obvously complained as they were so new i could have taken them back to the shops with the reciept but now nokia had changed the imei numbers my reciept was useless , i said i should be sent three brand new n8s , they again sent me badly refurbed handsets just as bad as the 1st lot and again all three of them had purple screen issues 
    i complained again and this time supervsior took over the case and agreed that 3 new n8s should be sent to me as mine was so new , she got them sent out and this time they were new but they still have the purple screen issue
    thats a toatal 12 n8s direct from nokia and all of them have had the issue  so i cant recomend going to a nokia care point or nokia care uk as the refurbs i was sent was a complete joke and looked like they were just used handsets that had been through a rough time
    through this month of me talking to nokia and sending emails and getting these phones swapped back to a condition of the phones that i sent them , they have said they are investigating it and taking it seriously however after some of their actions towards users (myself included) on these forums it doesnt seem like they are taking it very serious at all , they have known about it for a month now and we still have not had an offical response from nokia themselves
    if you would like to read more infomation on this problem and to see how wide spread it is then please check the following links
    http://www.nokiausers.net/forum/nokia-n8/39462-i-think-nokia-using-two-different-types-screen-n8-may...
    http://www.nokiausers.net/forum/nokia-n8/39532-n8-purple-screen-test-please-take-part-if-you-have-n8...
    http://www.allaboutsymbian.com/news/item/12604_Defective_screens_found_in_som.php
    http://forum.dailymobile.se/index.php?topic=39665.0
    http://www.nokiadna.com/2011/02/nokia-n8-nokia-c7-oled-screen-issues-plauge-nokia-users/
    http://n8geeks.com/nokia-n8-amoled-display-issue/
    there are many more threads about this issue across the net and if you google n8 screen problems or n8 purple screen problems you will come acroos many many pages of unhappy users from all across the globe
    i just hope nokia sort this out soon
    ho do you users with the problem feel about this issue and how do you think nokia should resolve it
    id be happy for a screen swap at a nsc or via warranty postal repair as long as it could be done quickly and the user wasnt without their phone for too long after all this is nokias mistake and not the users that bought the phone so all fixes should be at minimal disturbance to them
    heres hoping when you test the image your not as unlucky as me and many other n8 owners from across the globe , its a brilliant phone but this screen issue lets it down alot especially during watching films and stuff

    sorry to hear you guys are having troubles too , its a shame sucha  great device as the nokia n8 has had an issue like this arise , it is effecting alot of n8/c7 handsets and is quite a widespread issue across the globe
    it would be great to hear from as many users as possible about this and what they think about it as a user of the c7/n8
    jimmyireland about your post mate
    yes it was written by me and yes it ws deleted not once but 3or4 times actually
    the mods said it was because i had set up a poll and voting system , so i read through forum rules and posted it again with what fitted their guidelines and even put in big caps that it was not a poll but a thread to help users identify a problem and discuss it which is what the forum is for , it was deleted again , i then posted it again with just the test image and how to spot the problem and again put big caps that the post fitted their guidelines and was just to help users , it was again deleted and i was banned by mods for 2 days saying that i had broke forum rules and posted a poll and that the test image wasnt a proper test image
    i then asked other users to post the image but when they tryed nokias spam filter kicked in with a message saying that their post contained spam and that they should write it again and try posting again
    to be honest it really looked like they were trying to cover up the issue , fair enough my 1st post could be considered a very very rough poll but the posts i made afterwards were edited to fit nokias guidelines and they still removed them ad banned me and then other users posts were marked as spam
    so i tweeted alot of people and even nokia have said that as long as the post doesnt contain polls/votes then it will be fine to postand that mods shouldnt delete it , which was excellent news and hopefull this thread will stay and users can load the image and test their screens and then discuss the issue here so nokia can see users discussion in one thread , it will alo help awareness of the issue
    hence this post that isnt a poll but a thread to help users identify wether their n8/c7 has a screen with a defect in the gradiation of colours
    as stated in original post not all n8s have this problem my gfriends doesnt and it displays the test image perfectly on all brightness settings , yet my n8s show the image as very purple on low brightness and the brighter the screen goes the less the purple is shown , it is still there just not as visible as it is in the lower brightness settings
    as i also mentioned many n8s between october and mid december are fine although some still have the problem , yet from mid december till current date the amount of n8s with purple issue is much much higher and it now seems very very rare that you will get a brand new n8 from the shops without this screen issue which leads me to believe that from launch nokia have used at least two screens in the builds of the n8 , some great screens and then the ones with dodgy purple tint , from the threads across the web it seems like the good screens nokia were using either run out or they have failed to source the same screen or the manufactuer of the screen has changed something
    iam not a nokia hater and iam not here to cause trouble or loose nokia sales etc
    i love nokia have used them for years and used symbian since the 6680 , iam always helping users across the web with their nokia problems and am an avid user on nokia users please check my profile and feel free to check my posts and how many times ive been thanked for being helpfull
    http://www.nokiausers.net/forum/members/buxz777.html
    as you can see i love nokia and spend alot of time using their devices , speaking highly of them and helping their users with problems, i also love good customer services and customer relations
    i understand that big companys have build issues iam a gadget lover and trained in ict supprt iam not silly and understand that these things happend and building these phones with such complicated electronics and some could end up with issues , it could happend to anyone , sony , apple , samsung , blackberry , lg etc etc
    however its how the companys react to these issues and relate to their customers that have spent 100s of pounds on their devices that is important , issues do arise , its how the company looks after its customers thats important
    i think alot of users think the same , they dont expect nokia to click their fingers and go heres a fix but they do expect nokia to investigate the issue and they do expect nokia to relate to its customers and not ignore them or the issue which is what it looks like when posts are deleted and users are banned for posting informative posts that help users identify a problem
    things like sending users really bad refurbs for brand new n8s also dont help users confidence in nokia statement of going to nokia care about the problem as all i got was second hand looking n8s that still have the problem they were sent off with and the originals were in much better condition
    like i say iam not here to cause trouble and i love nokia the n8 is the best phone ive ever had and its almost my dream device and everything ive wanted on a device for years its the ultimate convergance device and agadget lovers dream , however when you see your gfriends and some of your mates n8 screens display the test image perfect then your n8 display it with a very purple hue it does dissapoint you and you do hope that nokia will take notice and fix the issue with the least amunt of hassle to the users
    cheers jimmy and sorry about the long post just wanted to clear some things up
    now lets get back to discussing the issue and what other users think about it
    have a great evening

  • I forgot my security questions and I have a different email address but it's not updated to my Apple ID how can I change my security setting and how to rescue my Apple ID?

    I forgot my security questions and I have a different email address but it's not updated to my Apple ID how can I change my security setting and how to rescue my Apple ID?

    Alternatives for Help Resetting Security Questions and Rescue Mail
         1. Apple ID- All about Apple ID security questions.
         2. Rescue email address and how to reset Apple ID security questions
         3. Apple ID- Contacting Apple for help with Apple ID account security.
         4. Fill out and submit this form. Select the topic, Account Security.
         5.  Call Apple Customer Service: Contacting Apple for support in your
              country and ask to speak to Account Security.
    How to Manage your Apple ID: Manage My Apple ID

  • Why do all the programs open when the mini is turned on, and how to avoid this?

    why do all the programs open when the mini is turned on, and how to avoid this?

    Open System Preferences > Users & Groups then select the Login Items tab.
    Remove all apps listed there.
    And check /Library/StartupItems
    Open a Finder window. From the Finder menu bar click Go > Go to Folder
    Type or copy paste the following:
    /Library/StartupItems
    Click Go then move all items from the StartupItems folder to the Trash.

  • Hi. My Ipad2 is being reseted each 1 minut of use and then I found this description "resetcounter(date and time).plist". Someone knows what this means and how to avoid this? Many, many thanks. iPad 2

    Hi. My Ipad2 is being reseted each 1 minute of use and then I found this description "resetcounter(date and time).plist". Someone knows what this means and how to avoid this? Many, many thanks.
    iPad 2

    Try resetting your device by holding down both the home and lock buttons for ~10 seconds or until the device restarts, ignoring the power slider. 

  • How do i create a contact list in adobe send from my email contact list and how do avoid typing individual email adresses

    how do i create a contact list in adobe send from my email contact list and how do avoid typing individual email adresses

    Hi [email protected],
    The e-mail addresses will not be memorized in Adobe send but will be saved in sent items.
    You can use Adobe send outlook plugin to access your email contact list and send.
    You can download it here:Send Large Files Online - Share, Control, Track & Manage | Adobe Send
    Regards,
    Florence

  • Have ordered Photoshop Elements 12 and Premiere Elements 12 (for MAC, EN version). Order went through but finally order was cancelled as Adobe Store was unable to approve. Subsequently order was cancelled. did anybody experience the same issue and how to

    Have ordered Photoshop Elements 12 and Premiere Elements 12 (for MAC, EN version). Order went through but finally order was cancelled as Adobe Store was unable to approve. Subsequently order was cancelled. did anybody experience the same issue and how to proceed.

    Hi there
    Please check with your credit card issuer to see why payment is not being approved.  When this is resolved you should be able to place a new order.
    Thanks
    Bev

  • WHAT are tokens and how it is issued and how it is viewed and solved by who

    WHAT are tokens and how it is issued and how it is viewed and solved by who
    points will be awarded

    Hi Jagrut,
    If you are talking of support token then,
    TOKENs are nothing but the issues faced in the actual live system(Production).
    So the end user who is facing will raise it, it will be assigned to the production support team and they will solve it.
    Regards,
    Atish

  • Problems with Flash Security issues and Captivate projects

    Hello,
    We're putting together a flash based eLearning course that has been created primarily in Adobe Captivate with flash plugins. The course consists of several modules, all which are embedded into HTML files that are linked to each other.
    Our client wants the project on a CD, which is starting to create some problems. Everytime the project goes to open another HTML/flash page, the security issue comes up that mentions that the flash player is trying to communicate to the internet.
    Now usually the way to get around this is to go into the security settings and add the CD as an accepted URL - however we can't do this for several reasons. The main one is that we are encasing it within Firefox Portable (included within the CD and as such, read only) and the computers it is being used on may not be connected to the internet.
    Any idea how we can get around this? Are the flash player settings stored somewhere locally on your computer, and can we configure them there? (perhaps through an ini or something) to place on the CD with the plugin for Firefox Portable? Is there a simpler way to address this that we're just not seeing?
    Thanks,

    Hi there
    I agree with Michael.
    Server2Go is also what I'd have offered. The mention of Firefox portable sound intiguing, but I'm really skeptical that it will do what is needed in this case.
    In case it will help, here are some steps for Server2Go.
    Download the Server2Go software from http://www.server2go-web.de/download/download.html
    Choose the Micro package
    This should result in receiving a zip file named distribute_apache1.3_micro.zip
    Unzip the contents of the zip file to the root of your hard drive ( C:\ )
    This should create a folder named distribute_apache1.3_micro
    Open this folder and delete the following files and folders inside:
    Files:
    splash.bmp
    logo.ico
    readme.txt
    Folders:
    dlls
    dbdir
    cgi-bin
    Open the htdocs folder and delete all files and folders inside.
    Copy all of your Captivate output files to the htdocs folder
    Rename the HTML page Captivate created to index.htm
    Copy the contents of the distribute_apache1.3_micro folder to the CD-ROM and test!
    Hopefully this helps... Rick
    Click here for Adobe Certified Captivate and RoboHelp HTML Training
    Click here for the SorcerStone Blog
    Click here for RoboHelp and Captivate eBooks

  • I updated some security issues and suddenlly my gmail does not open. it shows 75% of the procees and does not go on

    I updated automatically some security issues in my computer (I don't remember which) and now my gmail will start opening until it reaches 75% and it will not go on opening.
    I can open it Internet explorer but not in Mozila fireworks

    Clear the cache and the cookies from sites that cause problems.
    "Clear the Cache":
    *Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"
    "Remove Cookies" from sites causing problems:
    *Tools > Options > Privacy > Cookies: "Show Cookies"
    Start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance/Themes).
    *Don't make any changes on the Safe mode start window.
    *https://support.mozilla.org/kb/Safe+Mode
    *https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes

  • What is a Software Security Device. and How do I get rid of it?

         When ever I open thunderbird or apple mail I get give password required Please enter the master password for the Software Security Device. How do I get rid of it. If I could easily transport my data to apple mail I would and drop TB. also this similiar asking for password comes up
         What can I do?.

    Thank you I saw this and seem to have put in a master password and now driving me crazy. Could I clean my mac and then reinstall a backup to try to get rid of problem. Seems like that answer went a long way back. Or should just set master password and enter it continually.

  • HT5193 I want to use Apple TV in a hospital classroom setting and IT is concerned about security (patient information). Is this an issue and how can I put them at ease?

    I want to use the Apple TV to create an interactive white board type setting in the classroom. I appreciate the help.

    My first reply was probably a bit vague but it's not clear exactly what you're planning to do.
    Anyhow first off, remember this is simply a user to user forum and is not an Apple staffed technical advice area so no one here can accept any responsibility for the implementation you attempt. 
    If you intend to do anything that could potentially compromise patient confidentiality you must get appropriate advice from suitable agencies including your IT dept and probably Apple itself. Depending which country you are in you will be subject to local healthcare laws aimed at protecting patient confidentiality.
    As users we know next to nothing about AppleTV under the hood security.
    AppleTV runs a version of iOS just like iPhones and iPads.
    There is no antivirus/firewall software for iOS as it's already pretty locked down. 
    That does not mean it is 100% secure as nothing is, and all these devices can potentially be hacked.
    AppleTV itself does not store any content permanently, losing data when it's unplugged, so that is probably not an issue unless someone was going to attempt a forensic style data rescue from the internal components.
    If your IT dept allows iPhones or iPads on the network then in principle it's the same, and in many ways less of an issue as it doesn't support 3rd party apps, only a small selection of features from Apple and selected partners.
    I assume for your whiteboard plan this would entail using a touch screen like an iPad for mirroring.  Be aware that fullscreen mirroring will send a 4:3 image to the display as the iPad screen is 4:3 not 16:9 (widescreen).
    You need to work with your IT dept to assess the feasibility of what you want to do - unless you need internet access, to me it would seem a standalone local network without internet connectivity might remove some concerns about devices connecting to the main hospital network.  Maybe their concern is simply wifi and possible interecption of data sent to the AppleTV - this would likely be a proprietary screen sharing format for Airplay but it could still potentially be intercepted on wifi though I can't really see why anyone would want to as the data would probably be pretty useless to them unless this was a specific attempt to capture Airplay streams and people knew what they were doing and had compromised your wifi security.
    Good luck.
    AC

  • I save web site passwords, but it does not consistently enter them when I log onto the same site. Seems to have started occurring after I installed Norton Internet Security 2012. Anyone aware of this issue and how to resolve?

    It works fine for a day or so, but seems to fail the next day.

    Websites may be using autocomplete=off to prevent Firefox from saving and filling the name and password.
    You can remove autocomplete=off with a bookmarklet to make Firefox save the name and password.
    *http://kb.mozillazine.org/User_name_and_password_not_remembered

Maybe you are looking for

  • Dual 2.5, Video Out to NTSC, JVC Monitor using BNC connection?

    I have a JVC NTSC Monitor that has only BNC Video In. I am running FCP5 and want to priview my videos in this monitor. Is there a connection cable or adapter I can purchase to make this singnal handling work? I have a ATI Radeo 9600 card and a 23" Ci

  • Apple beta-testers program.

    Apple seeks beta-tester, but charges $ 300 for the beta program FCP X.

  • Apple tv 2 wake mac running lion

    Hi, Ok so every night I put my iMac to sleep and every morning my kids are telling me to wake up the iMac because there is no library showing in Apple TV 2.  But I have my System Prefs set to wake for network access.  What am I missing and what do I

  • Can't recognize airport via lan and wan cables??

    Trying to add airport extreme to present set up of G4 desktop that presently is hooked up to an external high speed modem. Want to hard wire to desktop and use airport extreme for laptop. I'm not simple but do not know much about setting up wireless.

  • Add additional Fees in the Invoice

    Hello There are additional charges incurred at warehouse for the various services provided by the warehouse. Hence the user needs to add this additional charges in the Invoice to the customer. Please provide the detail steps to set up the same. Thank