Should I demote or trust?

Posted on 2013-11-19
Medium Priority
Last Modified: 2013-11-21
I run a 30 computer 2003 Domain( Company) with two DCs.   My Company has merged with a smaller company whos five employees who are going to be working in our office starting next week.  Their network has one Small Business server 2011 and have their own domain (New).

I orginally planned to demote their server, move it into the 2003 domain as a  member server.  Like wise move the new workstations into my domain.

Now I wonder would I do better to Trust the two domains and move nothing.  

Which would be better?

Will haveing 2003 Domain and a 2011 Domain in a trust make for, perhaps authentication Issues? Would the NEW domain be able to print to devices in the Company Domain?  Would DNS have to be updated in some way?

Thoughts appreciated.
Question by:oldgary

Assisted Solution

valmatic earned 800 total points
ID: 39659481
For that few computers i would move those new pcs to your domain, then look into making that server be part of your domain and eventually the main active directory server since it is newer.
LVL 40

Expert Comment

ID: 39659494
Just recreate those 5 accounts
demote active directory and add it as a member server
why to manage trusts and DC only for 5 computers

LVL 19

Expert Comment

ID: 39661198
Yes I agree. For 5 users/computers you're complicating things. Just create them new accounts in your domain, migrate their data and mail to your environment. Decommission their domain.
Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

LVL 24

Accepted Solution

Sandeshdubey earned 1200 total points
ID: 39661303
There were wo option for you either use ADMT to migrate users/computer to your own domain or create new account and join machine to domain.

As the the opposite domain as SBS server you cannot create trust and without trust ADMT will be not possible.So to have to create new users in your domain for these employee and join machine to domain and do profile migration.

See this about SBS limitation:http://blogs.technet.com/b/sbs/archive/2007/10/04/debunking-the-myth-about-additional-domain-controllers-replica-dcs-in-an-sbs-domain.aspx

Author Comment

ID: 39662681
Thank you all for these helpful and thoughtfull replies.

So does this sound right:

Log onto the SBS server as admin and run DCPROMO to demote the DC

Join the SBS as a member server to the corporate domain.

Create the Five user accounts.

Assign accces priveleges for the five accounts on the now Member SBS server

Join the Workstations to Corporate Domain.  Map Drive ect to the old data.

Have users sign in.

Now as to what Sandeshdubey alludes to when mentioning "Profile Migration"  Can I have the new WS profiles reflect their current data without haveing to import it into the new Corporate profiles?  

Thanks for all this help help.
LVL 24

Expert Comment

ID: 39665155
I am not sure but it seems you cannot have SBS2011 server as member server in domain.You can add it as DC but then you need to place the FSMO role on SBS server also you need to check the licencing part.

Regarding the profile you need to do profile migration as domain will change.

Author Comment

ID: 39666118
Oh Dear.

This is more complicatedt than I thought.

Would I do better then to just join it to the Company Domian and move the roles?

Or is this a new question?

Author Comment

ID: 39666257
To answer the first question  it appears that a trust is not possible.

To answer the second question it cannot be demoted.

This leaves me with Sandes solution of joining it to the domain.

This is no small step since I am bascially raising my domian from 2003 R2 to SBS 2011.

Thanks for everyones help even if was not good news.

I am going to close this question start a new one with a title something like:  How to join an already configured SBS 2011 server into another Domainn

Featured Post

Get 10% Off Your First Squarespace Website

Ready to showcase your work, publish content or promote your business online? With Squarespace’s award-winning templates and 24/7 customer service, getting started is simple. Head to Squarespace.com and use offer code ‘EXPERTS’ to get 10% off your first purchase.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

A simple method to resolve a "keyboard not working" problem by modifying the Windows registry. This issue can often be encountered after using the VMware vCenter Converter Standalone Agent to perform a Physical-to-Virtual (P2V) conversion process.
Take advantage of one of the most useful technologies available - virtualization!
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question