domain trusts between prod/test

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hello

We have been asked to provide our users with Single Sign On capabilties in
our production and test environments.
Thus, the user logs into production and has access to the test/dev
environment without having to provide additional credentials.
Alternatively, we were previously given direction to keep both environments
completely separate to protect the integrity of the prod enviornment.
The general consensus among our team at this time is to use a one way trust
from prod to test in AD.
I do not have experience working with domain trusts and am wondering if
anyone has experience realted to this scenario. Security issues? Pitfalls?
Could this be harmful to our production environment? A better solution?
Both domains are Windows 2000.
Your comments are greatly appreciated.
Thanks,

Mark Clark
 
A trust is the way to go. One-way will allow production to acess test, but
not vice versa (if test is the trusting domain). Just create a group in the
test domain and assign permissions to resources to that group, then add
users/groups from production to the test group.

...kurt
 
Back
Top