• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 266
  • Last Modified:

site-to-site VPN domain help

I have a site-to-site VPN that is currently working between two Cisco Pixs.  My current setup is:

Site A has no domain.  Site A has a Terminal Server (Windows 2003).  
Site B has a domain controller (Windows 2003).

Currently, Site A has users set up in "Computer Management" not Active Directory.  
Site B has users set up in Active Directory.

So all users have to connect to Site A's Terminal Server with one username and Site B's with another.  We would like to consolidate this, however, using our current hardware/software.

Microsoft suggests not making a Terminal Server a Domain Controller, and we don't want to have to buy another Windows Server 2003 to act as a domain controller at Site A.

How can we have Site A's Terminal Server authenticate through Site B's domain controller?  Additionally, is this wise?

Thanks!

0
eluh
Asked:
eluh
  • 3
1 Solution
 
MATTHEW_LCommented:
Simply joining those PC's in site a to the domiain including the terminal server will allow domain authentication.  This will occur over the WAN / VPN to the domain controller in site b.  This can be done and will work, but you need to watch out for bandwidth concerns as authentication traffic will be crossing the WAN.  If it is a small amount of users in this office it may not be bad.  Also, remember that you must point DNS to the domain controller for resolution.  So DNS traffic will have to cross the WAN as well.
0
 
eluhAuthor Commented:
What do I need to do on Site B's end?  I changed the DNS on Site A, but it can't find Site B's domain.
0
 
MATTHEW_LCommented:
Is the site a computers pointing to the dns server at site b?  If not this will not work.  Once this is changed you should be able to join the computer to the domain using the domain.com format or domain to join it.  From that point you should be able to authenticate with AD accounts to resources from either domain to either domain.
0
 
MATTHEW_LCommented:
Did that work for you?
0

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now