| TABLE 1: Types of Kerberos Transitive Trusts | ||
| Trust Type | Creation | Characteristics |
| Tree-root trust (between two tree-root | Implicitly, dcpromo | Transitive, two-way |
| domains in the same forest) | ||
| Parent-child trust (between parent-child | Implicitly, dcpromo | Transitive, two-way |
| domains in the same tree) | ||
| Shortcut or cross-link trust (between any | Explicitly | Transitive, one- or |
| domains in the same forest) | two-way | |
| External trust (between domains in | Explicitly | Nontransitive, one- |
| different forests) | or two-way | |
| Non-Windows trust (between two Kerberos | Explicitly | Nontransitive, one- |
| KDCs, such as a Win2K domain and an MIT | or two-way | |
| Kerberos-based domain) | ||