[Webinar] Streamline your web hosting managementRegister Today

x
?
Solved

Active Directory to NT cross domain DHCP authentication...?

Posted on 2009-04-14
2
Medium Priority
?
502 Views
Last Modified: 2012-05-06
This is probably an easy question for the Microsoft supergurus here, but it's uncharted territory for me...

Here's the scenario- we have an antiquated NT domain that we're finally migrating away from, and are moving to a MS 2003 Active Directory domain.  So far the migration of the services has been straightforward, but now, I'm migrating over the DCHP service.  It isn't any problem to migrate the scopes, leases, etc via DHCPEXIM/NETSH, *but* the DHCP on the AD is showing that little red arrow stating that it's not going to hand out any IP addresses until it's authenticated. It's clear I'll need to authenticate it to the AD domain to make it live.

For the time being, becuase we're still in servitute to our major bread and butter applications, we are still having users sign onto the network using their old NT usernames, and they request the services on the AD (email, print queues, etc) via cross-domain trust as well as setting their AD usernames to give full access to their NT usernames.  Up until now, these have been services that are given out after the user has already signed on and have already been authenticated.  

Question- If I authenticate the DHCP to the AD domain, will it refuse to hand out leases to users signing onto the old NT domain becuase it will only allow DHCP requests from users signing onto the AD domain?  Or, will the DHCP give leases to the NT domain usernames becuase of the cross-domain trust?  OR, is there an additional step I need to do after I authenticate the DHCP to get it to give leases to users signing onto the NT domain?

It just occurred to me that I should probably ask before flipping the switch, so that the users won't beat me up for inadvertedly locking them out...thanks for your help!
0
Comment
Question by:goodoldave
2 Comments
 
LVL 86

Accepted Solution

by:
oBdA earned 1600 total points
ID: 24139538
You don't authenticate the DHCP service, you *authorize* it in AD to start. All the authorization does is allowing the DHCP service in the AD domain to start handing out DHCP addresses.
Once the service is authorized, it will hand out IP addresses to anyone.
0
 

Author Comment

by:goodoldave
ID: 24139562
THANK YOU!  Exactly the answer that I was looking (and hoping) for!

For your super speedy response, I'm upping the point value for this question.  Thanks again!
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
As many of you are aware about Scanpst.exe utility which is owned by Microsoft itself to repair inaccessible or damaged PST files, but the question is do you really think Scanpst.exe is capable to repair all sorts of PST related corruption issues?
The Relationships Diagram is a good way to get an overall view of what a database is keeping track of. It is also where relationships are defined. A relationship specifies how two tables connect to each other. As you build tables in Microsoft Ac…
Suggested Courses

608 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question