Extending Your Authentication Framework

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

If your environment includes more than one forest, or your organization needs to exchange information with other Kerberos clients and servers, you need to extend your authentication framework to accommodate those relationships and resources. You do this by establishing trust relationships and by creating Active Directory accounts as appropriate.

For a worksheet to assist you in documenting your plan for extending your authentication framework, see "Extended Authentication Framework" (DSSAUT_3.doc) on the Windows Server 2003 Deployment Kit companion CD (or see "Extended Authentication Framework" on the Web at https://www.microsoft.com/reskit).

Figure 14.6 shows the process for extending your authentication framework.

Figure 14.6   Extending Your Authentication Framework