Solved

Joining two domains.

Posted on 2006-06-30
7
2,693 Views
Last Modified: 2012-08-13
Is it possible in Windows 2003 SBS to join two domains together?  For example,  I have domain A (domainA.com) and domain B (domainB.local).  Can inter-connect the two so that I don't have to authenticate when crossing domains to access resources?  What about DNS?  Do I need to do anything there to join the two?  Active Directory?  Etc....

Thanks!
0
Comment
Question by:Quetysis
7 Comments
 
LVL 4

Expert Comment

by:dalsym
ID: 17021810
Active Directory Domains and Trusts

Do you traffic to be allowed both ways between the two domains or just one direction?

Off the top of my head, I think you are looking for a two-way transitive trust. I'm sure someone will come along with more detail if needed.
0
 

Author Comment

by:Quetysis
ID: 17021846
I am looking to allow traffic both ways.  I'll look at the AD domains and trusts.  Thanks
0
 
LVL 23

Expert Comment

by:Erik Bjers
ID: 17022064
Yes, you want two-way transitive trust.

If you are creating a new doman, you can join it to an existing forest when you rin DCPROM, this will create the trusts you need.

eb
0
DevOps Toolchain Recommendations

Read this Gartner Research Note and discover how your IT organization can automate and optimize DevOps processes using a toolchain architecture.

 
LVL 44

Expert Comment

by:scrathcyboy
ID: 17022138
You can do this from the LOCAL network, since they are just shared directories, but for people external to the local network accessing these websites, there is no cross-certificate association that is normal for the website setup.  So is this just for local access, or for the public from outside, on the web??
0
 
LVL 15

Assisted Solution

by:nprignano
nprignano earned 200 total points
ID: 17022439
UNFORTUNATELY, since you are using SBS, you cannot create trusts.  SBS is designed for small business, and therefore is limited with its functionality for enterprise class solutions (such as creating multi-domain networks).  If you want to do this, you will need to upgrade at least one of the servers to Win2003 Standard.

http://www.experts-exchange.com/Operating_Systems/Windows_Server_2003/Q_21505548.html


nprignano
0
 
LVL 95

Accepted Solution

by:
Lee W, MVP earned 300 total points
ID: 17022600
nprignano is close, but not quite correct.  As he states, SBS domains CANNOT be joined together - you cannot create trusts between them.  Simply adding one regular server will not allow you to create a trust - this restriction is DOMAIN level, not server level.  If you wanted to create a trust between the two domains you would have to upgrade BOTH domains to standard versions of Windows Server using the Transition Pack for SBS 2003.  This is not a cheap thing to as the transition pack essentially costs the savings you had by buying SBS instead of the regular products.  For example, if SBS cost you $3000 for licensing, and Exchange, Windows, and CALs WOULD have cost you $6000 for the full products, then the transition pack will cost you $3000 (Transition Pack $3000 + SBS licensing $3000 = 6000 = what you would have spent on the full products).
0
 
LVL 15

Expert Comment

by:nprignano
ID: 17022646
thank you, leew, for setting the record straight :)

nprignano
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now