Shortcut Trust is a manually created transitive trust between two domains in the same forest to shorten the authentication path.
Simple definition
Shortcut Trust is a manually created transitive trust between two domains in the same forest to shorten the authentication path. It belongs to the Active Directory vocabulary and is useful when reading architecture diagrams, product documentation, logs, or administration procedures.
What is it used for?
Its main purpose is to reduce authentication latency or complexity when domains are far apart in the tree. The practical value depends on the surrounding architecture, security model, and operational requirements.
How does it work?
It creates an additional direct path without changing domain hierarchy. Existing parent-child trusts remain in place.
Key points
- Scope: A manually created transitive trust between two domains in the same forest to shorten the authentication path.
- Operational goal: Reduce authentication latency or complexity when domains are far apart in the tree.
- Implementation: It creates an additional direct path without changing domain hierarchy. Existing parent-child trusts remain in place.
Points to watch
A trust does not replace ACLs; combine direction, transitivity, SID filtering, and authentication scope with least privilege.
In short
Shortcut Trust = a manually created transitive trust between two domains in the same forest to shorten the authentication path. Use it when you need to reduce authentication latency or complexity when domains are far apart in the tree.