Expiring Today—Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Merge 2 2003 domains into 1 forest

Posted on 2007-12-04
9
Medium Priority
?
2,046 Views
Last Modified: 2010-07-27
Hello All,
I am working for a town and thet want to combine the townhall domain and the PD domain into 1 forest. They currently have a trust between the 2 of them but they want them to be under the same forest.
The 2 domains are in seperate locations..

I have no clue where to start. are we going to need a new domain name for the whole forest? i.e. hall.town.com and pd.town.com....

thanks!
-Matt
0
Comment
Question by:mfrado
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
9 Comments
 
LVL 30

Expert Comment

by:LauraEHunterMVP
ID: 20402703
What you are describing will require one or both domains to be migrated; there is no "prune and graft" functionality within Active Directory.  You can either collapse domainA into domainB, or (as has been my choice in similar situations) stand up a brand-new domain and migrate both existing domains into it.  

You can perform the migration using the AD Migration Tool (free download from MS, google for version 3.0), or pay for a third-party tool from the likes of Quest or NetIQ that will simplify the process somewhat over ADMT.
0
 
LVL 2

Expert Comment

by:lcit
ID: 20402715
0
 

Author Comment

by:mfrado
ID: 20402744
A co-worker mentioned something called "disgontiguous" migration does that ring a bell with anyone?
0
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

 
LVL 30

Expert Comment

by:LauraEHunterMVP
ID: 20402887
"Discontiguous migration"? Never heard that phrase in my life.  Discontiguous namespaces describe namespaces that are built on different DNS root domains - company.com and othercompany.com, for example - but I don't see the relevance to a migration without further details.
0
 

Author Comment

by:mfrado
ID: 20402930
yes i meant namespaces....im sorry, typo i will try to get mor information on why he brought this up...
0
 

Author Comment

by:mfrado
ID: 20403513
A little more detail on the issue:
The reason we are doing this is to get Desktop Authority working across the domains. As i said earlier we have a trust between them, but in order for this to work we need a "full transitive bidirectional trust". Is there a way to determine if i already have this or not? It this trust only present in a Forest?
thanks!
0
 
LVL 30

Accepted Solution

by:
LauraEHunterMVP earned 2000 total points
ID: 20404017
If both of your domains are running at Windows Server 2003 forest functional level, you can create a forest trust between them which will be two-way and transitive in nature. Modifying the forest functional level and creating trust relationships are managed through the AD Domains and Trusts MMC snap-in, as described here: http://redmondmag.com/columns/article.asp?EditorialsID=593
0

Featured Post

10 Questions to Ask when Buying Backup Software

Choosing the right backup solution for your organization can be a daunting task. To make the selection process easier, ask solution providers these 10 key questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question