racphillips
asked on
Trust Between Two SBS 2003 domains on different networks.
i have "domain1.local" on one subnet, and "domain2.local" on another subnet, i would like to have cross authentication across the two domains? other than upgrading both the Domain Controllers to Server 2003....
Cheers Guys
Cheers Guys
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Americom
Upgrading the DCs to Windows Server 2003 standard or newer would be the only Microsoft supported solution I know of. If the network resources need to be shared between the two domains, your only reasonable, affordable, and financially meaningful to manage would be to do the upgrade.
Yes, agree, an upgrade is the only option. The cheaper licencing provided by SBS comes at the price of not being able to create trust links or child domains. Otherwise I imagine companies would just opt for SBS to save money...
I'm not even sure that the file permission workaround would work described above as the users would still have different SIDs so would not be recognised.
I'm not even sure that the file permission workaround would work described above as the users would still have different SIDs so would not be recognised.
For file sharing it would work if you set up the permissions correctly. You don't have to be logged on to the domain to access file shares. But it is still a pain in the butt and would not be transparent to the users.
Yeah...I believe that would work as long as the account and password is the same. It's been working like that for while and I'm not sure why Microsoft would want to allow such pass-through permission....
But even that would not be something you want to do in your enviornment as the more you do the more your enviornment would be unmanagable. I don't believe your company would want you to do such non centralize administration and paying you to create more works, that defeat the purpose of having a domain.
But even that would not be something you want to do in your enviornment as the more you do the more your enviornment would be unmanagable. I don't believe your company would want you to do such non centralize administration and paying you to create more works, that defeat the purpose of having a domain.
ASKER
Cheers mate.
ASKER
Its My Company, but i think i will wait until upgrade for cross authentication...why does it have domains and trusts in SBS then if it doesn't work?
Cheers again.
Cheers again.
You get one domain in SBS for authentication and integration of services. You get the benefit of active directory, Exchange, ISA, security, etc. for a reduced price, but only for a maximum of 50 people and only for 1 domain. It is specifically meant as a small business solution. If you see screens and etc. that suggest you can do more, it is only because it is the same subsystem as the rest of the Windows 2003 platforms.
ASKER
Ok, thanks for clearning that up :) unfortunately it came with the Business, and both sites have SBS for the domain, but 2003 for every other Server!?! silly....