Active Directory, 2 domains or create a forest and add as tree?

Hi,

I have DomainA at my company and we plan on taken over managed services/support for a separate company/DomainB with 20 users. Their servers are not well maintained or patched, AV ect…

I am trying to figure out if I should add the DomainB as a tree and create a forest with in my current DomainA?

Or

keep it as a separate Domain? So, I would have two Domains, DomainA and DomainB.  DomainB will be on the same subnet as DomainA.

Any suggestions or things to watch for, Pros or Cons?

Thanks!
EncinitasAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

SandeshdubeySenior Server EngineerCommented:
You can keep the two forest seperate or merge the choice is yours.If they want domain name seperate then keep the forest seperate and you can create trust between forest if required to access the resources.If you want to merge refer below links.

http://blogs.technet.com/b/activedirectoryua/archive/2009/10/01/mergers-acquisitions-or-reorganizations-may-have-you-considering-active-directory-restructuring.aspx

http://social.technet.microsoft.com/wiki/contents/articles/13904.how-to-migrate-users-across-forest-cross-forest-using-admt-3-2-with-sid-and-passwords.aspx
0
Nathan PSystems ArchitectCommented:
Why do you want to put servers that are not well maintained or patched onto the same networking subnet as your well managed domain?

I'd say, for now, keep it as a separate domain.  Unless the two businesses are going to start working together soon.  Then, plan your next steps after the merger is completed, and decide based on what the business becomes.
0
EncinitasAuthor Commented:
They will not be working together.
0
Newly released Acronis True Image 2019

In announcing the release of the 15th Anniversary Edition of Acronis True Image 2019, the company revealed that its artificial intelligence-based anti-ransomware technology – stopped more than 200,000 ransomware attacks on 150,000 customers last year.

EncinitasAuthor Commented:
Sandeshdubey, we currently only have one domain, no forest.

I was thinking about creating a forest and adding DomainB to it? I think we will be building a new DC and file/print server for them. So should not have infected/non-patched servers.

I'm Just not sure if we should join DomainB to the forest or keep them as a separate domain?
0
SandeshdubeySenior Server EngineerCommented:
You can create new domain for domain B and migrate users/computers to get rid of old h/w which is having issue.You can keep them seperate and in future if required you can merge as per business requirement.
0
Cliff GaliherCommented:
I have to say this whole things sounds like it needs to be revisited. As an MSP, you definitely do NOT want to have two domains under the same forest, or anything similar. You'll have a heap of legal issues, licensing issues, and more.

So with that in mind, even keeping them on the same subnet is a sketchy proposition. If the relationship is truly MSP/client, price your services accordingly to get them on their own network (go HaaS if need be) and manage their network as if it were their own (because it is) and not as a part of yours. Keep yourself legally protected.

Doing any portion of what you are currently considering is a very painful road. If for no other reason than the various regulatory requirements that are now a part of everyday IT.
0
EncinitasAuthor Commented:
And can they be on the same subnet?
0
SandeshdubeySenior Server EngineerCommented:
Yes,you can have in the same subnet but would recommend to have different subnet.Also if dhcp in both domain then it could be an issue as in the same subnet you cannot have two dhcp server.
0
EncinitasAuthor Commented:
If I put the two separate domain on the same subnet but separated with v-lan would that work? Can I use two dhcp servers?
0
SandeshdubeySenior Server EngineerCommented:
If the vlan is created and both cannot talk then it should be not an issue.
0
EncinitasAuthor Commented:
There are only 20 pc's if I use static IP's will this resolve everything?
0
Nathan PSystems ArchitectCommented:
If you use static IP's on the new companies computers, but they are still in the same IP subnet space as the original company, then they will still be able to see all the original company stuff.

It's not about IP allocation, it's about segregation.. You don't want them in the same IP space.

If you VLAN them, that creates that segregation, meaning that the new computers have to go through approved routes to the original network.. if you even allow it.

Best to keep them seperated.. ( http://www.mtv.com/videos/artist/52770/come-out-amp-play-keep-em-separated.jhtml )
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.