Solved

Need External Domain Trust with SBS 2008 Domain

Posted on 2013-12-16
2
834 Views
Last Modified: 2013-12-16
I’m working for a holding company who is in the early stages of bringing companies they’ve bought under our network. Right now, just to share resources first, we set up an external domain trust with the newly acquired company.

One of the companies we’ve tried to set up a domain trust with is running 2008 R2 Small Business Server, which I’ve found out the hard way, can’t do external trusts with outside domains. So, what I want to do is bring up another 2008 R2 server, forest & domain prep, dcpromo it, then move the fsmo roles to the new DC and off the SBS Server so we can set up the External Domain Trust with the holding company. (I have setups on how to “migrate” from SBS to a real DC)

I guess the most basic question is: Will this setup work so that I can get an external domain trust setup or will SBS still block it even though the Schema will be upgraded from 44 to 47 in the process and the new 2008 R2 server will hold all the new fsmo roles..?

Since this is only temporary, can I run with this setup and still have the Exchange Server that is on the SBS Server run fine in the interim..? It would be a sort of hybrid setup…The new 2008 R2 Server would be the domain controller and the SBS 2008 R2 Server would host Exchange.

Would Exchange have to point to the new DC or would it run fine with all the settings the way they are since the SBS 2008 R2 box would still be up and running as a Secondary DC per se..? I was going to make both DC’s Global Catalogs.

When we're ready to make the cut over to the Holding Company's network we would just scrap the "temporary setup" of the 2008R2 Server and the SBS 2008R2. There'd be no reason to "finish out" the migration, because we'd cut everyone over.

Thanks for your help,
0
Comment
Question by:MarkSatori
2 Comments
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 500 total points
ID: 39721844
If the SBS server is there, then a trust isn't going to be possible. Even doing a prep to a later version isn't going to help, because the SBS server will block it. If you move the FSMO roles off the SBS server then it will shut down.

If they are using Exchange as well, then you will have to migrate Exchange off the SBS server to a member server. Then you can DCPROMO out the SBS server and create the trust. There are no other options.

Simon.
0
 

Author Closing Comment

by:MarkSatori
ID: 39721977
Thank you for the fast and concise reply..!
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
Following basic email etiquette rules will help you write a professional email and achieve a good, lasting impression with your contacts.
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now