Prevent access from other domain

[saimon65]

I have two domain on my network.
Users in Domain A have to access computers in domain B.
But, I dont want users from domain B to access computers in domain A. What is the best way to acieve this?
thanks.

 

[sutors]

I assume you have a two way domain trust between your domains.
Modify this by having only a one-way trust.

Lukasz

 

[saimon65]

Thanks for the reply. In "Active Directory Domains and trusts" how should the settings in the Trust tab be? Should the domain B be in incoming or outgoing in the domain A trusts? and should it be transitive?

 

[sutors]

If you have any other domains then transitive trust will allow eg. child domains to use that trust as well.. but if you only have those two domains then it doens't matter.

So in your case, you need an incoming trust from B.
Or in other words, domain B must trust domain A

Have a look at this article:

http://technet2.microsoft.com/windo...35a2-4692-8564-37a66a85150e1033.mspx?mfr=true

Lukasz