• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 496
  • Last Modified:

Started 2nd company, create child domain? 2003 R2 & 2008 Mix

Hello Everyone,

Let me first try to explain our situation and maybe you guys can help me decide on the best path for the future.  Mind you this infrastructure was setup WAY before my time here.
Our current environment consists of one domain, lets call it XYZ.com.  In this domain we have 6 companies that are all part of XYZ.com.  At our main building we have 2 DC's, both are 2003 R2. Each one of the other companies/locations have 1 DC that is part of XYZ.com and are all also 2003 R2.  
NOW...
We have started a new venture in another state and we are starting to plan for that location.  This location will need to have a DC and need to be controlled by us here.  This is a different company and thus, the domain is going to be different, let's say XYZXY.com.  The new DC at this location will be a 2008 DC, and eventually we will hire IT support for that out of state location in which we would not them to have access to our infrastructure here, but we will need access to ours and theirs.  

Now for the questions:

1. Because the new DC will be 2008, we are in the process of building a 2008 server for our XYZ.com domain as well.  What implications could we face with a new DC on 2008 and the rest of our servers on 2003 R2.  I know we must migrate AD to the new 2008 schema and such, what else am i missing in a mixed environment like this?

2. Since we are going to have a new domain at the new location, XYZXY.com, should a forest be created with 2 child domains? XYZ and XYZXY?  

3. Are there other ways of doing this? Best practices?

Thank you for your time!  

Mike
0
Plote
Asked:
Plote
  • 4
  • 3
1 Solution
 
Mike KlineCommented:
If they are in your forest then they theoretically have access to everything if they are domain admins (and know what they are doing).  The forest is the security boundary.

The best practice is to try and stick with one domain but if you need more and trust them you can create another domain in the forest.

No implications of having a mixed mode domain/forest with 2008 and 2003

Thanks
Mike
0
 
PloteAuthor Commented:
Thanks Mike,

We currently don't have a forest, just one domain.  Would we have to demote our DC's and then dcpromo as a child domain?

Thanks
0
 
Mike KlineCommented:
You can add another domain to the existing forest.
0
Microsoft Certification Exam 74-409

VeeamĀ® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 
Mike KlineCommented:
0
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
How big are the companies (employees?)
Do they have any reason to be connected (other than they are owned by the same person(s))?  Will they have any reason to be connected?
0
 
PloteAuthor Commented:
Thanks for the screenshot Mike!  Based on that, I will have to use the create new domain in the existing forest correct? For the new company domain.  
0
 
PloteAuthor Commented:
Leew,

Current company is roughly 300 employees and the new company is unknown (now is 5 but growing daily), BUT they will have to share resources, email server, citrix, etc...  

The companies do the SAME exact business, just different states and different names.  All accounting and such will be done at my main location.  At least for the first few years.  
0
 
Mike KlineCommented:
You can also create a new forest, but I'd just add the domain in the same forest in this case.

Thanks

Mike
0

Featured Post

Transaction-level recovery for Oracle database

Veeam Explore for Oracle delivers low RTOs and RPOs with agentless transaction log backup and transaction-level recovery of Oracle databases. You can restore the database to a precise point in time, even to a specific transaction.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now