Chapter Summary

• Run adprep /forestprep on the schema master and adprep /domainprep /gpprep on each domain’s infrastructure master.

• Limit the scope of trusts so that they meet the necessary requirements only. Do not create a two-way trust when a one-way trust is all that is required.

• Selective authentication enables administrators in a trusting forest or domain to allow limited access to specific users from a trusted forest or domain.

• AD FS enable partner organizations to have single sign on for local Web applications without configuring forest-based or domain-based trusts.

• Server for NIS enables a computer running Windows Server 2008 to function as an NIS server for UNIX-based computers.

• Services for NFS enables a computer running Windows Server 2008 to function as a file server for a UNIX-based computer.

• The Password Synchronization component enables account passwords for AD DS–based and UNIX-based computers to be the same.

• SUA enables POSIX-compliant applications to run on computers running Windows Server 2008.