• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 921
  • Last Modified:

Need External Domain Trust with SBS 2008 Domain

I’m working for a holding company who is in the early stages of bringing companies they’ve bought under our network. Right now, just to share resources first, we set up an external domain trust with the newly acquired company.

One of the companies we’ve tried to set up a domain trust with is running 2008 R2 Small Business Server, which I’ve found out the hard way, can’t do external trusts with outside domains. So, what I want to do is bring up another 2008 R2 server, forest & domain prep, dcpromo it, then move the fsmo roles to the new DC and off the SBS Server so we can set up the External Domain Trust with the holding company. (I have setups on how to “migrate” from SBS to a real DC)

I guess the most basic question is: Will this setup work so that I can get an external domain trust setup or will SBS still block it even though the Schema will be upgraded from 44 to 47 in the process and the new 2008 R2 server will hold all the new fsmo roles..?

Since this is only temporary, can I run with this setup and still have the Exchange Server that is on the SBS Server run fine in the interim..? It would be a sort of hybrid setup…The new 2008 R2 Server would be the domain controller and the SBS 2008 R2 Server would host Exchange.

Would Exchange have to point to the new DC or would it run fine with all the settings the way they are since the SBS 2008 R2 box would still be up and running as a Secondary DC per se..? I was going to make both DC’s Global Catalogs.

When we're ready to make the cut over to the Holding Company's network we would just scrap the "temporary setup" of the 2008R2 Server and the SBS 2008R2. There'd be no reason to "finish out" the migration, because we'd cut everyone over.

Thanks for your help,
1 Solution
Simon Butler (Sembee)ConsultantCommented:
If the SBS server is there, then a trust isn't going to be possible. Even doing a prep to a later version isn't going to help, because the SBS server will block it. If you move the FSMO roles off the SBS server then it will shut down.

If they are using Exchange as well, then you will have to migrate Exchange off the SBS server to a member server. Then you can DCPROMO out the SBS server and create the trust. There are no other options.

MarkSatoriAuthor Commented:
Thank you for the fast and concise reply..!
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now