UCS 2.4 - Univention

8.4 Extended Configuration
When setting up and using the trust relationship the domain controllers of both domains must be able to
reach each other over the network and identify each other using broadcasts or WINS.
8.4.1.1 Windows domain trusts Samba domain
1. In Univention Directory Manager ➞ Computer a Domain Trust Account must be created - with a
name reflecting the NetBIOS name of the Windows domain - and a password issued for the account.
The password quality requirements which may apply to Windows domains must be observed.
2. A trust relationship must be created on the Windows PDC (see below). The NetBIOS name of the
Samba domain is required for this.
3. The trust relationship between the Windows domain and the Samba domain can be removed by
deleting the trust relationship on the Windows PDC and the domain trust account in Univention
Directory Manager.
Windows NT
1. The user manager usrmgr.exe must be started on the Windows PDC and selected in the menu
Policies ➞ Trust Relationships ➞ Trusted domains ➞ [Add].
2. The NetBIOS name of the Samba domain must be entered in the input field Domain and the pass-
word of the domain trust account entered in the input field Password. Clicking [OK] prompts the
message The trust relationship with has been set up successfully.
Windows 2000
1. The menu for trust relationships can be found under Start ➞ Programs ➞ Administrative tools ➞
User manager for domains on the Windows PDC. Right clicking on the personal domain opens the
Properties dialogue.
2. Following selection of Trust relationships ➞ Trusting domains ➞ [Add], the NetBIOS name of the
Samba domain can be entered in the input field Trusting Domain and the password of the domain
trust account can be entered in the input field Initial password. The password must be repeated.
Clicking [OK] set up the trust relationship. If the procedure is successful, a confirmation message is
displayed, which can be confirmed with [OK].
Windows 2003
Attention:
The documentation was based on Windows Server 2003 Standard Edition.
1. The menu for trust relationships on the Windows PDC can be reached via Start ➞ Administrative
Tools ➞ Active Directory Domains and Trusts. Right clicking on the personal domain opens the
Properties dialogue.
2. When Trusts ➞ New Trust is selected, the New Trust Wizard is opened and must be confirmed
with [Next].
191