Windows Server 2003 Security: A Technical Reference

Summary

Trust between computer systems, domains, and forests parallel that which we see in our own lives. When trust is enabled, we empower people and organizations to do better work. However, we also empower those who would for whatever reason cause harm. At first blush, it seems that we need to stop the widespread access that trust entails. However, the answer is not to withdraw behind the boundaries of the past but instead to expand or increase in number better controlled, trusted access. Alhough there is no risk-free way to share resources, we must use the defenses we have. Limit the trusts to only those that are necessary, within the trust limit the access to those systems that need to be shared, and on those systems have tight control over ...