Avatar of sanukc
sanukc
Flag for United States of America asked on

How do I add existing domain to an existing forest without impacting users?

Hi!
Here is my current domain layout with 3 physical locations:

Seattle - Domain: Seattle - Forest: CompanyForest
Victoria - Domain: Victoria - Forest: CompanyForest
Everett - Domain: Everett - Forest: Undefined: Everett Implied

I would like to move the Everett domain under the CompanyForest to allow for trusted access and logins and allow for easier administration.

Is this possible without impacting the users of the Everett domain?  If so, what is the process?  

Your help on this would be greatly appreciated.

SKC

Active Directory

Avatar of undefined
Last Comment
Mike Kline

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
Americom

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
SOLUTION
Mike Kline

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Americom

Mike, you type better and read better than I do :)

I was mis reading that sanukc was trying to create Everett domain, or it's already been created..
sanukc

ASKER
All 3 locations are different companies.  My team manages the domains for all 3 locations and they need to be kept separate.  That's the reason for the 3 domains.

Americom

hummm..if all three locations are different companies? Do they have have anythig to do with each other? Like are theire business merged or plan to merge? If not, you should keep them separated. I don't think you should even create trust between them. Unless if they are partner or has something to do with each and agreed to share resources between these three businesses then you can create trust between them. Just creating trust will not impact any forest domain and allow them to share resources.
Otherwise, for security reason an these businesses has nothing to do with each other, there is no reason to create trust, you need to keep them separate for sure.
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
Mike Kline

I agree with Americom, keep them separate until you have a requirement to create a trust or merge them.   For instance if users need to share resources then you create a trust.  As long as none of that is needed just keep them separated.
sanukc

ASKER
The only reason I was thinking of merging (or at least creating a trust relationship) was that our CFO (of the whole company) travels to all 3 locations and would like to use resources at all 3 locations like printers and fileshares.  This is not a drop-dead requirement, but he has asked for resources many times and one of these days might lose patience with me for not allowing him to print on the printers wherever he is.
Mike Kline

Well then that would be a requirement, or if more people start going to different locations.
How do you work it for him now?  Does he have three accounts?
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
Americom

may be we are no too clear on the relationship of your buiness in related to the three businesses. What does your CFO has to do with the resources of those three companies, particular with fileshars? Does your company also have another separate domain or use the domain user accounts in one or more ot those two domans?
sanukc

ASKER
The 3 companies have controllers who report into a CFO of the parent company.  The CFO travels between these companies on a weekly basis.

I allow him to log into an Everett account when he visits the Everett office.  He copies files he wants to print to an USB key and logs into an Everett system to print them.

Since the Victoria domain is trusted and part of the CompanyForest, he is able to use resources in Victoria without issues.  
Americom

It sounds like these companies have operations need for certain invidual such as the CFO. May be later, there will be more request similar to this. Then like Mike said, there you have a requirement. I guess for now, the best way is to just established trust between these Domain Forests and observe how heavy and frequent the request over time. I'm sure in the future, if there's a need, you might end up migrating these domain into one but it seems like that would be too early to call at this point. So, just creating trust between these domains would make your CFO happy. This way, he can only need one account and have access to all resouces in all domains if needed.
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
Mike Kline

At least one good thing here is if you do need to do a major migration down the road the CFO does control the money and funds...thining about money  for 3rd party migration tools :)