Windows NT trusts: which statement best describes a trust relationship in classic Windows NT domain architecture?

Introduction / Context:
Classic Windows NT domains (pre–Active Directory) used trusts to allow users in one domain to be authenticated for resources in another domain. Understanding the directionality and creation of trusts is crucial for exam scenarios and for troubleshooting cross-domain access issues.

Given Data / Assumptions:

• Trusts exist between domains, not between individual workstations.
• Trusts in Windows NT are non-transitive and one-way unless two complementary trusts are created.
• Administrative rights are not automatically conferred by a trust; access still depends on group membership/ACLs.

Concept / Approach:
In Windows NT, an administrator would use Server Manager for Domains to establish a trust. A single trust is one-way (A trusts B or B trusts A). To enable mutual trust, separate trusts must be created in both directions. Trusts facilitate authentication but do not themselves grant privileges; permissions are still assigned explicitly via groups and ACLs.

Step-by-Step Solution:

Verification / Alternative check:
Microsoft documentation for Windows NT domains describes “one-way, nontransitive trusts,” and shows configuration steps using Server Manager for Domains, confirming the chosen statement.

Why Other Options Are Wrong:

Common Pitfalls:
Assuming trusts equal permissions; mixing up NT’s one-way trusts with modern AD forest trusts which may be transitive.

Final Answer:
It is created using Server Manager for Domains and is a one-way relationship unless explicitly configured both ways.