Solved

Windows SBS Domains

Posted on 2011-09-18
8
292 Views
Last Modified: 2013-11-10
I have two SBS servers. They are a 2003 & 2008 versions.  The 2003 machine is a dedicated database machine with no client workstations and the 2008 machine has all our office clients attached who need to get assets off the 2003 machine. Since SBC doesn't support trusts how can I give my users access to the Windows 2003 SBS Premium machine so they can access files and the SQL data bases on it?

0
Comment
Question by:chasmx1
  • 4
  • 3
8 Comments
 
LVL 58

Expert Comment

by:Cliff Galiher
ID: 36556923
Legally you cannot. One SBS server per domain and organization. You must migrate resources and roles off of one of the SBS servers to a windows server standard (or higher) licensed OS.

-Cliff
0
 
LVL 22

Accepted Solution

by:
Larry Struckmeyer MVP earned 500 total points
ID: 36556925
These two SBS servers must be in different ADs.  This is the only way that I can see that you can run two SBS servers on the same set of wires.  You will need to create user accounts on the SBS 2003 and when the users access it they will be challanged for their credentials.  Could be the same names and passwords, but they will be different ADs so therefore different SIDs and credentials, even if they look the same to us humans.
0
 

Author Comment

by:chasmx1
ID: 36556993
What about sharing the root drive on the 2003 box?  Could the users then map the share?

Thx
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 
LVL 58

Expert Comment

by:Cliff Galiher
ID: 36557124
Let me be clear. It is ILLEGAL to run two SBS servers in the same organization. Asking how to do something illegal, even Zif Technically possible, is against EE policy. So YOU CANNOT DO THIS. Full stop. Nothing more can be said on the matter. Migrate data, resources, and roles, and get legal. DONE.

-Cliff
0
 

Author Comment

by:chasmx1
ID: 36557237
It is not possible (legal) to add the 2003 machine’s domain to the AD of the 2008 machine.  Nowhere is there a restriction for accessing the files of the 2003 server from a client in another domain or a standalone machine via the Internet.  I can find no restriction stating that two SBS machines can’t be on the same segment in separate domains.  I'M NOT TRYING TO DO ANYTHING ILLIGAL.  You need to back off on your rhetoric.  I'm a customer of EE not a thief and I resent you implying that I am.
0
 
LVL 58

Expert Comment

by:Cliff Galiher
ID: 36557256
Authenticated access requires CALs. Accessing shared files required authenticated access. I am not talking network segments here. It'd be just as illegal for two SBS servers to be run on separate network segments connected by a VPN. If this was allowed, mega corps could set up an SBS server for their finance team, another for legal, another for sales, etc etc. This is a legal/EULA issue. I don't assume or imply. You presented a scenario that, based on YOUR description, is illegal. Done and done.

-Cliff
0
 

Author Comment

by:chasmx1
ID: 36557306
Apology accepted!  You misinterpreted my intent.  I’m aware of the CAL rules and I have plenty of unused CALS available in the organization.
0
 
LVL 58

Expert Comment

by:Cliff Galiher
ID: 36557342
THAT doesn't matter. It is also in the EULA. One SBS server per organization.
0

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Some time ago I faced the need to use a uniform folder structure that spanned across numerous sites of an enterprise to be used as a common repository for the Software packages of the Configuration Manager 2007 infrastructure. Because the procedu…
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question