{"id":371,"title":"Hyper-V Laboratuvar\u0131nda Active Directory Forest Trust Yap\u0131land\u0131rmas\u0131","content":"<div id=\"model-response-message-contentr_626f8579d51d292d\" class=\"markdown markdown-main-panel stronger enable-updated-hr-color\" dir=\"ltr\" aria-live=\"polite\" aria-busy=\"false\">\n<p data-path-to-node=\"4\">Kurumsal d&uuml;nyada \u015firket birle\u015fmeleri, sat\u0131n almalar veya farkl\u0131 departmanlar\u0131n izolasyonu gibi senaryolarda kar\u015f\u0131m\u0131za &ccedil;\u0131kan en &ouml;nemli yap\u0131&nbsp;<strong data-path-to-node=\"4\" data-index-in-node=\"139\">Active Directory Forest Trust<\/strong> mimarisidir. Bu yaz\u0131da, Hyper-V &uuml;zerinde izole etti\u011fim iki farkl\u0131 Forest yap\u0131s\u0131n\u0131 nas\u0131l birle\u015ftirdi\u011fimi ve bu s&uuml;re&ccedil;teki kritik teknik detaylar\u0131 inceleyece\u011fiz.<\/p>\n<h2 data-path-to-node=\"5\">1. Neden Forest Trust?<\/h2>\n<p data-path-to-node=\"6\">Normal \u015fartlarda bir Active Directory Forest'\u0131, g&uuml;venlik s\u0131n\u0131r\u0131d\u0131r. Yani <code data-path-to-node=\"6\" data-index-in-node=\"73\">onder.local<\/code> i&ccedil;indeki bir kullan\u0131c\u0131, varsay\u0131lan olarak <code data-path-to-node=\"6\" data-index-in-node=\"127\">monder.local<\/code> i&ccedil;indeki bir klas&ouml;re eri\u015femez. Forest Trust; bu iki ba\u011f\u0131ms\u0131z yap\u0131n\u0131n birbirine g&uuml;venmesini sa\u011flayarak, kullan\u0131c\u0131lar\u0131n kendi kimlik bilgileriyle di\u011fer domaindeki kaynaklara (dosya sunucular\u0131, yaz\u0131c\u0131lar vb.) eri\u015fmesine olanak tan\u0131r.<\/p>\n<h2 data-path-to-node=\"7\">2. Altyap\u0131 Haz\u0131rl\u0131\u011f\u0131 ve A\u011f \u0130leti\u015fimi<\/h2>\n<p data-path-to-node=\"8\">Hyper-V &uuml;zerinde iki adet Windows Server (Domain Controller) kurarak i\u015fe ba\u015flad\u0131m.<\/p>\n<ul data-path-to-node=\"9\">\n<li>\n<p data-path-to-node=\"9,0,0\"><strong data-path-to-node=\"9,0,0\" data-index-in-node=\"0\">Forest A:<\/strong> irfan.local (192.168.10.10)<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"9,1,0\"><strong data-path-to-node=\"9,1,0\" data-index-in-node=\"0\">Forest B:<\/strong> onder.local (192.168.20.10)<\/p>\n<\/li>\n<\/ul>\n<p data-path-to-node=\"10\"><strong data-path-to-node=\"10\" data-index-in-node=\"0\">Kritik Not:<\/strong> \u0130ki sunucunun birbirine <code data-path-to-node=\"10\" data-index-in-node=\"36\">ping<\/code> atabilmesi, g&uuml;ven ili\u015fkisinin ilk \u015fart\u0131d\u0131r. Hyper-V &uuml;zerinde \"Internal\" veya \"Private\" switch kullanarak bu izolasyonu sa\u011flad\u0131m.<\/p>\n<h2 data-path-to-node=\"11\">3. DNS: G&uuml;venin G&ouml;r&uuml;nmez Kahraman\u0131<\/h2>\n<p data-path-to-node=\"12\">Active Directory'de DNS yoksa, hi&ccedil;bir \u015fey yoktur. \u0130ki Forest'\u0131n birbirini tan\u0131yabilmesi i&ccedil;in <strong data-path-to-node=\"12\" data-index-in-node=\"93\">Conditional Forwarders (Ko\u015fullu Y&ouml;nlendiriciler)<\/strong> kulland\u0131m.<\/p>\n<ul data-path-to-node=\"13\">\n<li>\n<p data-path-to-node=\"13,0,0\"><strong data-path-to-node=\"13,0,0\" data-index-in-node=\"0\">irfan.local<\/strong> DNS sunucusuna gidip: \"E\u011fer birisi <code data-path-to-node=\"13,0,0\" data-index-in-node=\"47\">onder.local<\/code> adresini sorarsa, git \u015fu IP'ye (192.168.20.10) sor,\" dedim.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"13,1,0\">Ayn\u0131 i\u015flemi tersi y&ouml;nde de ger&ccedil;ekle\u015ftirdim.<\/p>\n<\/li>\n<\/ul>\n<blockquote data-path-to-node=\"14\">\n<p data-path-to-node=\"14,0\"><strong data-path-to-node=\"14,0\" data-index-in-node=\"0\">&Ouml;nemli:<\/strong> E\u011fer DNS &ccedil;&ouml;z&uuml;mlemesi do\u011fru &ccedil;al\u0131\u015fmazsa, Trust sihirbaz\u0131 kar\u015f\u0131 taraf\u0131 bulamayaca\u011f\u0131 i&ccedil;in hata verecektir. <code data-path-to-node=\"14,0\" data-index-in-node=\"111\">nslookup<\/code> komutu ile kar\u015f\u0131l\u0131kl\u0131 &ccedil;&ouml;z&uuml;mlemeyi test etmek hayati &ouml;nem ta\u015f\u0131r.<\/p>\n<\/blockquote>\n<h2 data-path-to-node=\"15\">4. Trust \u0130li\u015fkisinin Kurulmas\u0131 ve Se&ccedil;enekler<\/h2>\n<p data-path-to-node=\"16\"><strong data-path-to-node=\"16\" data-index-in-node=\"0\">Active Directory Domains and Trusts<\/strong> konsolu &uuml;zerinden ba\u015flatt\u0131\u011f\u0131m sihirbazda kar\u015f\u0131m\u0131za &ccedil;\u0131kan se&ccedil;imler, yap\u0131n\u0131n davran\u0131\u015f\u0131n\u0131 belirler:<\/p>\n<ul data-path-to-node=\"17\">\n<li>\n<p data-path-to-node=\"17,0,0\"><strong data-path-to-node=\"17,0,0\" data-index-in-node=\"0\">Trust Type:<\/strong> Burada \"Forest Trust\" se&ccedil;ene\u011fini se&ccedil;tim. Bu, her iki Forest i&ccedil;indeki t&uuml;m alt domainlerin (child domains) birbirine g&uuml;venmesini sa\u011flar.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"17,1,0\"><strong data-path-to-node=\"17,1,0\" data-index-in-node=\"0\">Direction (Y&ouml;n):<\/strong> \"Two-way\" (\u0130ki y&ouml;nl&uuml;) se&ccedil;erek, her iki taraf\u0131n kullan\u0131c\u0131lar\u0131n\u0131n da kar\u015f\u0131l\u0131kl\u0131 kaynaklara eri\u015febilmesini sa\u011flad\u0131m.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"17,2,0\"><strong data-path-to-node=\"17,2,0\" data-index-in-node=\"0\">Authentication (Kimlik Do\u011frulama):<\/strong> \"Forest-wide Authentication\" se&ccedil;ildi. Bu, laboratuvar ortam\u0131nda kolayl\u0131k sa\u011flar; kar\u015f\u0131 taraftaki t&uuml;m kullan\u0131c\u0131lar bu taraftaki kaynaklar i&ccedil;in yetkilendirilebilir (Selective Authentication ise daha s\u0131k\u0131 g&uuml;venlik gerektiren &uuml;retim ortamlar\u0131nda tercih edilir).<\/p>\n<\/li>\n<\/ul>\n<h2 data-path-to-node=\"18\">5. Do\u011frulama ve Test (Validation)<\/h2>\n<p data-path-to-node=\"19\">Yap\u0131land\u0131rma bittikten sonra en tatmin edici an, \"Validate\" butonuna bas\u0131p <strong data-path-to-node=\"19\" data-index-in-node=\"75\">\"The trust has been validated\"<\/strong> mesaj\u0131n\u0131 g&ouml;rmektir. Bu, \u015fifreleme anahtarlar\u0131n\u0131n ve ileti\u015fim kanallar\u0131n\u0131n sa\u011fl\u0131kl\u0131 &ccedil;al\u0131\u015ft\u0131\u011f\u0131n\u0131 onaylar.<\/p>\n<h3 data-path-to-node=\"20\">&Ouml;\u011frendi\u011fim Kritik Dersler<\/h3>\n<ol start=\"1\" data-path-to-node=\"21\">\n<li>\n<p data-path-to-node=\"21,0,0\"><strong data-path-to-node=\"21,0,0\" data-index-in-node=\"0\">DNS Temeldir:<\/strong> Network seviyesinde IP ileti\u015fimi olsa bile, DNS yap\u0131land\u0131r\u0131lmadan AD Trust kurulamaz.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"21,1,0\"><strong data-path-to-node=\"21,1,0\" data-index-in-node=\"0\">G&uuml;venlik S\u0131n\u0131rlar\u0131:<\/strong> Forest-wide kimlik do\u011frulaman\u0131n ne kadar geni\u015f yetkiler verdi\u011fini, Selective Authentication'\u0131n ise ne kadar granular (ince ayarl\u0131) bir g&uuml;venlik sa\u011flad\u0131\u011f\u0131n\u0131 pratikte g&ouml;zlemledim.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"21,2,0\"><strong data-path-to-node=\"21,2,0\" data-index-in-node=\"0\">Netdom Sorgular\u0131:<\/strong> Aray&uuml;z d\u0131\u015f\u0131nda komut sat\u0131r\u0131 &uuml;zerinden <code data-path-to-node=\"21,2,0\" data-index-in-node=\"56\">netdom trust<\/code> komutlar\u0131n\u0131 kullanman\u0131n, sorun giderme (troubleshooting) an\u0131nda ne kadar h\u0131z kazand\u0131rd\u0131\u011f\u0131n\u0131 fark ettim.<\/p>\n<\/li>\n<\/ol>\n<hr data-path-to-node=\"22\">\n<p data-path-to-node=\"23\"><em data-path-to-node=\"23\" data-index-in-node=\"0\">Bu laboratuvar &ccedil;al\u0131\u015fmas\u0131, karma\u015f\u0131k kurumsal a\u011f yap\u0131lar\u0131n\u0131 anlamam yolunda b&uuml;y&uuml;k bir ad\u0131m oldu. Bir sonraki a\u015famada bu trust yap\u0131s\u0131 &uuml;zerinde \"Group Policy\" uygulamalar\u0131n\u0131 ve \"Cross-Forest\" yetkilendirmeleri <a title=\"AD Forest Trust &Uuml;zerinde Yetkilendirme ve Group Policy Y&ouml;netimi\" href=\"..\/..\/..\/ad-forest-trust-uzerinde-yetkilendirme-ve-group-policy-yonetimi\">okuyabilirsiniz<\/a><\/em><\/p>\n<hr data-path-to-node=\"24\">\n<p data-path-to-node=\"26\">&nbsp;<\/p>\n<p data-path-to-node=\"26\">&nbsp;<\/p>\n<\/div>\n<p><!----><\/p>","excerpt":"Kurumsal d\u00fcnyada \u015firket birle\u015fmeleri, sat\u0131n almalar veya farkl\u0131 departmanlar\u0131n izolasyonu gibi senaryolarda kar\u015f\u0131m\u0131za \u00e7\u0131kan en \u00f6nemli yap\u0131\u00a0Active Directory Forest Trust mimarisidir. Bu yaz\u0131da, Hyper-V \u00fczerinde izole etti\u011fim iki farkl\u0131 Forest yap\u0131s\u0131n\u0131 nas\u0131l birle\u015ftirdi\u011fimi ve bu s\u00fcre\u00e7teki kritik teknik detaylar\u0131 inceleyece\u011fiz.","created_at":"2026-01-05 07:34:54","updated_at":"2026-09-07 21:02:41","category_id":6,"view_count":408,"reading_time":4,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2026-01-05 04:34:54","featured_image":"\/uploads\/images\/2026\/01\/695b40203f363_1767587872.png","slug":"hyper-v-laboratuvarinda-active-directory-forest-trust-yapilandirmasi","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"}