2 Active Directories using the same network infrastructure

            The “A” department is in a position that requires it to create its own active directory, but we need to run the “A” department AD along side the “B” department active directory that is currently up and running.  From discussions with other IT people, I was told that this could be accomplished but would require some extra hardware.  The “A” Dept wants to keep its current email and data servers separate and use trusts between AD’s to share data when needed.  Currently, most of the data is shared via FTP or data warehouse web connection and for the most part will be keeping these connections into the future.
The “A” DEPT has PC’s in various IP ranges inside the whole network.  We have roughly 600 – 700 nodes that have different IP addresses but need to talk to “A” DEPT AD.
I was told the following…
1)       In order to accomplish 2 AD to be running side by side, the “A” DEPT would need its own DNS Server and WINS Server?  In addition the two separate DNS and WINS servers would need to replicate at a given period of time in the day.  This would keep the “A” DEPT and “B” DEPT servers up to date to access each others servers via names.
2)       To accomplish this with one DHCP server, the “A” DEPT’s PC, Servers and Printers would need to be statically assigned an IP address with the “A” DEPT’s DNS and WINS server IP address.
3)       The “A” DEPT DNS and WINS servers would have access to all the IP ranges.  The “A” department has its own firewall so the ports can be opened or closed as needed.
1)       Is this realistic?
2)       If this is realistic, is there a more efficient solution?
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

"Two AD's" could mean two domains.

But "two AD's" could mean two organization units in the same domain, which is recommendable.

The configuration depends on the physical and organizational configuration. If the two dep's are separated, but connected thru a high speed line, the network topology can be like this:

Two separate networks/sites for each dep. In every site: dhcp, dns, wins, AD and global catalog (all these can run on the same machine). Beeing the same domain, only replications between sites must be configured, if the default is'n't good. The most powerfull DC will have the fsmo roles, or these roles can be distributed to more machines.

If the mail server exists, it's preferable to be on another machine, could be a domain controller, but not one of the other domain controllers (well, if the dc is powerfull enough, can be mail server too, but be carefull to harddisk space).

Of you choose the two domains solutions, you'll have almost the same hardware requirement:

Two DC's, with dns, dhcp, wins, fsmo roles on each domain and trusted relashionship between the two domains. There will be two mail server, one for each domain.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Networking

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.