Create an Active Directory External Trust with Selective Authentication

1. Create an Active Directory global group named Developers.
2. Add the Developer user as a member of the Developers group.

1. Create a conditional forwarder on the Barrier Reef Audio domain controller to forward DNS traffic for dev.rivercityai.com to the River City AI domain controller.
2. Create a conditional forwarder in the opposite directory on the River City AI domain controller to forward DNS traffic for corp.barrierreefaudio.com to the Barrier Reef Audio domain controller.
3. Test DNS name resolution in both directions.

1. Create a one-way, outgoing external trust with selective authentication to allow developers in the Barrier Reef Audio domain to access resources in the River City AI domain.

1. Modify the computer account for the River City AI domain controller to configure selective authentication for the Developers group in the Barrier Reef Audio domain to authenticate using the trust and access resources.

Using the password from the lab details:

1. Log on to BRAWKS1, and test access to \\RCAIDC1.dev.rivercityai.com\data as a developer user ([email protected]) to ensure access is granted.
2. Log on to BRAWKS1, and test access to \\RCAIDC1.dev.rivercityai.com\data as a non-developer user ([email protected]) to ensure access is not granted.