Domain issues for server 2003/2000

Posted on 2007-04-02
Medium Priority
Last Modified: 2013-12-05
I have 2 servers, one is windows server 2003 and the other is 2000, what i am trying to do is get them both on the same domain but the problem is, they both have to have active directory users and computers on them so that i can lock out certain files and give permissions to people, is it possible to make server 2003 run off 2000's domain and also be a file server? if so, how do i make it so they are both on the same domain? please explain simply cause i'm not used to doing this kind of thing. Thank you.
Question by:StrategicGnomer
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
LVL 30

Assisted Solution

LauraEHunterMVP earned 2000 total points
ID: 18836710
If I'm understanding you correctly, you want to add your Windows Server 2003 computer as a file server to your Windows 2000 domain.

If this is what you are trying to do, you can add the 2003 server to the 2000 domain as a member server - you can do this using the netdom command-line utility or on the Network Identification tab when you right-click on My Computer and select Properties.

Hope this helps.

Laura E. Hunter - Microsoft MVP: Windows Server - Networking


Author Comment

ID: 18836820
yes but it's set as a domain controller somehow and setting to another domain wont work just like that, i need to set it as not a domain controller but have the abilities of one or so it seems cause i need to use active directory and be able to give permissions to other users.
LVL 30

Assisted Solution

LauraEHunterMVP earned 2000 total points
ID: 18836947
Are you saying that the two servers are configured as DCs in separate domains?  Is this the intended configuration? If it is not, you can either use the dcpromo tool to "de-promote" the 2003 server so that it is no longer a domain controller, or use the Active Directory Migration Tool (http://www.microsoft.com/downloads/details.aspx?FamilyId=6F86937B-533A-466D-A8E8-AFF85AD3D212&displaylang=en) to consolidate the two domains into a single domain.

If the two servers are DCs in separate domains and this is the intended configuration, you can configure a trust relationship between them so that you can grant permissions for DomainA\UserA to a resource in DomainB, and vice versa: http://technet2.microsoft.com/WindowsServer/en/library/31915de7-ff58-4f26-a8ec-450ffca759121033.mspx

Author Comment

ID: 18839566
I want them to be the same domain but i want to be able to set permissions on both computers. I.e. use active directory on both but have them on one domain.
LVL 30

Accepted Solution

LauraEHunterMVP earned 2000 total points
ID: 18839609
In that case you have two options which I've already outlined:

[1] Use dcpromo to demote one of the DCs to member server status and then join it to the other domain as a member server. You can then apply permissions to resources on the member server using AD users and groups from a single domain.

[2] Use the Active Directory Migration Tool (URL included in an earlier comment) to collapse the two domains into one. You can then apply permissions to resources on the member server using AD users and groups from a single domain.


Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found here: http://www.experts-exchang…
Have you considered what group policies are backwards and forwards compatible? Windows Active Directory servers and clients use group policy templates to deploy sets of policies within your domain. But, there is a catch to deploying policies. The…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
In this video, Percona Solutions Engineer Barrett Chambers discusses some of the basic syntax differences between MySQL and MongoDB. To learn more check out our webinar on MongoDB administration for MySQL DBA: https://www.percona.com/resources/we…
Suggested Courses

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question