Solved

Best solution for bringing together 3 domain controllers?

Posted on 2016-07-22
2
54 Views
Last Modified: 2016-08-30
Hi there experts,
we have a client that f, has a three separate dc across their business. The servers are in locations near to eachother. All server 2012.
 This was originally setup for security I am told but the problem is the departments cannot access eachothers data..
The problem is that ideally there should be one main domain controller. Someone has mentioned site and services as a solution?
They use Office 365 , so down the line may consider single sign on server.
For one of the domains they use azure active directory, for another domain controller thy have on premise active directory.
 Essentially we want to get them onto one domain, and enable remote access between all the users.
What do you recommend?
0
Comment
Question by:unrealone1
2 Comments
 
LVL 39

Accepted Solution

by:
Adam Brown earned 500 total points
ID: 41725053
You would want to pick a single domain to move the others into, then use Active Directory Migration Tool (ADMT) to migrate the user objects over with SID history.

That said, if there is a network connection between the environments, it would likely be beneficial to set up active directory trust relationships between the domains. That would allow you to grant permissions for resources in each of the other domains. That's probably the solution that would require the least amount of time, planning, and effort, since migrating domains into another domain is a pretty major undertaking (Specifically, the most difficult part of AD migration is getting computers and servers moved to the new domain, and if Exchange or other AD integrated apps are in the mix, that makes it much more difficult).
1
 
LVL 1

Author Closing Comment

by:unrealone1
ID: 41776088
Thank you for the insight
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

What to do when Windows Update is not working correctly? What tools can I use to detect the cause of the malfunction problem? What does this numeric error code mean? These and other questions that you have been asking in the past are answered here (…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question