Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Advice: New domain or join current domain

Posted on 2016-10-25
6
Medium Priority
?
50 Views
Last Modified: 2016-11-15
My company is placing a satellite company in Mexico and would like to know if it would be better to have a separate domain and add it to our domain or just add a domain controller to our current domain and have a different subnet? In both cases I am planning on having a domain controller on site but would like to know the pros and cons of having a separate domain or just add to our current domain.

Our domain is currently a 2003 domain but will be raising it to 2008 then 2012 but that will not happen before we move into Mexico.  The controller I will be putting in Mexico will be a 2012 server.
0
Comment
Question by:Tim
6 Comments
 
LVL 35

Accepted Solution

by:
Cris Hanna earned 2000 total points (awarded by participants)
ID: 41859723
Dos the "company" in Mexico require access to resources on the network that's running 2003?
Or vice versa?   If not...I'd just run them completely separate
1
 

Author Comment

by:Tim
ID: 41860897
Yes, the company needs access to a terminal server, file server and IIS server on the same network. I will add the server to the domain as a secondary controller.

If I add a 2012 server to the domain as a secondary server will that cause any issues? I have two 2008 servers that serve as secondary domain controllers but don't know if a 2012 server will cause issues on the 2003 domain.
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 41860907
you can add 2012 to a 2003 domain but you should read up and make sure your domain controllers are very healthy
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
LVL 1

Expert Comment

by:cmlbaete
ID: 41862460
If it was me and I had to do this when we opened a China branch create a site to site VPN and open add it as a new site with its own DC. That was if the DC fails in Mexico you won't lose all the AD as it will replicate with your main office. It worked well for us even with fairly low speed internet/VPN connection.
0
 
LVL 37

Expert Comment

by:Jian An Lim
ID: 41863153
if you upgrade your first DC from 2003 to 2008, then you can even deploy Read only DC.
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 41887603
Author agreed that the office in Mexico with the new install needed access to the resources in the main company domain and therefore would join the existing domain as recommended
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
A bad practice commonly found during an account life cycle is to set its password to an initial, insecure password. The Password Reset Tool was developed to make the password reset process easier and more secure.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

783 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question