AD Seperation

Hi,

I have 1 Active Directory with 3 sites. My client want to seperate the 3 sites with one indepedant AD by site.

Do you know how to do that ?

I have 2 ideas :

=> Disconnect multisite VPN & recover FSMO rôles on each site on the site server.
 or
=> Classic migration to a new domain (but I have to install a new domain server & it will be longer than my first idea).

Thanks for your advices
LVL 10
Benjamin MOREAUProject ManagerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Lee W, MVPTechnology and Business Process AdvisorCommented:
Your first idea is fine... Provided your client NEVER, EVER wants to re-unite the domains or form trusts between them.  Personally, I consider the first idea really bad and something that shouldn't be considered.  The correct way is to install separate domains.  Trusts will be possible if the client ever wants them.  Yes, it's more work, but it's a more professional solution.  

The big question I have is why separate the domains?  This is not generally a good idea.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Tony MassaCommented:
Lee is correct.  I assume the client is trying to solve a problem by splitting the sites into domains.  What problem are you trying to solve for?  There are likely other, less drastic, alternatives.

You should require at least 2 DCs for each domain, meaning you would need 6 DCs, minimum, so they may have to purchase additional hardware to support the proposed site "split".  This becomes a management nightmare, for you, I assume.
Benjamin MOREAUProject ManagerAuthor Commented:
Thanks, i will use a new domain on each sites as Lee says.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.