Solved

split up domain

Posted on 2011-03-23
9
339 Views
Last Modified: 2012-05-11
how do i split up domain
0
Comment
Question by:jag-pens
  • 4
  • 3
  • 2
9 Comments
 
LVL 74

Expert Comment

by:Glen Knight
Comment Utility
Any more information?

What type if domain? What type of splitting up do you want to do?
0
 

Author Comment

by:jag-pens
Comment Utility
Sorry,

I was trying to do a search logged on through an rdp session (any way to run a lighter weight expertss exchange session?).

Anyways, main site all 2003 servers, primary and backup dc, 2003 exchange. One company (of two) leaving the premises and want to split completely (but that could change somewhere down the road...).  I'm not that worried about the data as the permissions can be redone relatively easily.  Rough numbers 120 users total split in two.  More concerned about Exchange than anything.  My gut says go with a new forest, then establish new domain for departing company, install fs and exchange, then move users over, but it's going to get messy...OWA and outlook anywhere users all over the place.  Remote site has single fs as bdc (again 2003)...

Thoughts?
0
 
LVL 74

Expert Comment

by:Glen Knight
Comment Utility
Your right, the best bet is to start a new domain, especially as exchange is installed.
0
 
LVL 18

Accepted Solution

by:
Netflo earned 250 total points
Comment Utility
Probably suggest creating a new forest and domain for the departing company, possibly a longer route but that way there are no dependencies. Yes the OWA and Outlook Anywhere could get messy, however if you have multiple IPs that shouldn't be an issue, if planned correctly.

You can still allow both domains to talk to each other via domain trust temporarily while you are in migration. For Exchange providing users mailboxes are below 2GB, Exmerge should be okay and importing should be a breeze too.

Heads up for the existing users who may have dud cache entries in Outlook when sending to users in the new domain. Going forward if the two separate domains wants to talk in future this can be done, you could always establish a trust later and allow file access.

If both organisation upgrade to Exchange 2010, you can take advantage of Federation Services, which can allow calendar, contact and free/busy access across forests too.

Hope this helps.
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 
LVL 74

Expert Comment

by:Glen Knight
Comment Utility
If you split the domains (by taking a DC offline and seizing all the roles to it) there is a whole load if cleaning up required.  It's also unlikely you will be able to trust each other because it's the same domain (although I've never tried so don't know for sure)

What you are suggesting is frought with problems, no doubt unsupported if you ever run in to problems, and I woukd seriously recommend against it.

Setting up a new, clean domain is the best way forward.  I personally, wouldn't even be considering anything else because of the work involved in putting it right.
0
 

Author Comment

by:jag-pens
Comment Utility
To demazter,

Sorry, what exactly do you mean by "What you are suggesting is frought with problems"?
0
 
LVL 18

Expert Comment

by:Netflo
Comment Utility
In other words, new domain and forest is the only way forward. Splitting the DCs and seizing the roles on both DCs to create two split networks is not the best way forward and you could end up with endless issues.
0
 
LVL 74

Assisted Solution

by:Glen Knight
Glen Knight earned 250 total points
Comment Utility
Well, any type of split of an existing domain for use by 2 different entities is going to cause problems with Acive Directory.

It's really not worth the hassle.
0
 

Author Closing Comment

by:jag-pens
Comment Utility
Ok guys, thanks for your input!
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

Suggested Solutions

Starting in Windows Server 2008, Microsoft introduced the Group Policy Central Store. This automatically replicating location allows IT administrators to have the latest and greatest Group Policy (GP) configuration settings available. Let’s expl…
Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now