Chapter 3 Preparing the TAPI environment 59Network Managers Guide for Symposium TAPI Service Provider for Succession, release 3.0Trust relationships between domainsIn large networks, or in networks where you want to create separate domains fordifferent departments or for security reasons, you can establish multiple domains.You can designate trust relationships between domains to provide members of onedomain with access to the resources of another domain without having to logon toseparate domains. The type of trust relationship you designate varies according tonetwork and security requirements.For example, you can create a domain for the sales department and anotherdomain for the accounts department. You can provide users of the accountsdomain with access to resources in the sales domain, without granting access toaccounts resources to users in the sales domain. In this scenario you can create aone-way trust relationship between these domains. Domain controllers for thesales domain trust users logged on to the accounts domain, but users logged on tothe sales domain are not trusted by domain controllers for the accounts domain.However, if you also want to allow access to the accounts domain to users loggedon to the sales domain, you can create a two-way trust relationship between thedomains. On Windows 2000 and Windows Server 2003 networks, you candesignate a two-way trust relationship between two domains.Symposium TAPI SP domain considerationsBefore establishing TAPI services and installing Symposium TAPI SP, one mustunderstand the domain and security requirements of the network. Microsoftrecommends two-way trust relationships for TAPI services. However, somecustomer requirements can dictate one-way trust relationships for securitypurposes. This section provides two sample trust relationship configurations forSymposium TAPI SP in a multidomain network.
