[Last Call] Learn how to a build a cloud-first strategyRegister Now


2 Active Directories using the same network infrastructure

Posted on 2004-11-30
Medium Priority
Last Modified: 2010-03-18
            The “A” department is in a position that requires it to create its own active directory, but we need to run the “A” department AD along side the “B” department active directory that is currently up and running.  From discussions with other IT people, I was told that this could be accomplished but would require some extra hardware.  The “A” Dept wants to keep its current email and data servers separate and use trusts between AD’s to share data when needed.  Currently, most of the data is shared via FTP or data warehouse web connection and for the most part will be keeping these connections into the future.
The “A” DEPT has PC’s in various IP ranges inside the whole network.  We have roughly 600 – 700 nodes that have different IP addresses but need to talk to “A” DEPT AD.
I was told the following…
1)       In order to accomplish 2 AD to be running side by side, the “A” DEPT would need its own DNS Server and WINS Server?  In addition the two separate DNS and WINS servers would need to replicate at a given period of time in the day.  This would keep the “A” DEPT and “B” DEPT servers up to date to access each others servers via names.
2)       To accomplish this with one DHCP server, the “A” DEPT’s PC, Servers and Printers would need to be statically assigned an IP address with the “A” DEPT’s DNS and WINS server IP address.
3)       The “A” DEPT DNS and WINS servers would have access to all the IP ranges.  The “A” department has its own firewall so the ports can be opened or closed as needed.
1)       Is this realistic?
2)       If this is realistic, is there a more efficient solution?
Question by:NDnickb
1 Comment
LVL 18

Accepted Solution

crissand earned 500 total points
ID: 12708801
"Two AD's" could mean two domains.

But "two AD's" could mean two organization units in the same domain, which is recommendable.

The configuration depends on the physical and organizational configuration. If the two dep's are separated, but connected thru a high speed line, the network topology can be like this:

Two separate networks/sites for each dep. In every site: dhcp, dns, wins, AD and global catalog (all these can run on the same machine). Beeing the same domain, only replications between sites must be configured, if the default is'n't good. The most powerfull DC will have the fsmo roles, or these roles can be distributed to more machines.

If the mail server exists, it's preferable to be on another machine, could be a domain controller, but not one of the other domain controllers (well, if the dc is powerfull enough, can be mail server too, but be carefull to harddisk space).

Of you choose the two domains solutions, you'll have almost the same hardware requirement:

Two DC's, with dns, dhcp, wins, fsmo roles on each domain and trusted relashionship between the two domains. There will be two mail server, one for each domain.

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Greetings, Experts! First let me state that this website is top notch. I thoroughly enjoy the community that is shared here; those seeking help and those willing to sacrifice their time to help. It is fantastic. I am writing this article at th…
This article is in response to a question (http://www.experts-exchange.com/Networking/Network_Management/Network_Analysis/Q_28230497.html) here at Experts Exchange. The Original Poster (OP) requires a utility that will accept a list of IP addresses …
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question