Hi All,

We have 2 complete isolated company with their owned AD.

We are planning for network integration with windows resources sharing (Lync / Sharepoint / File service / Exchange?)

Intersite VPN will be setup, we are considering Domain/Forest trust only or do Domain Migration.

So far I can think about is Domain Migration need server/workstation reinstallation.

But Single Domain/Forest can avoid potential problems and easier upgrade in future?

Any pros and cons over each other?

Please help...

Thanks,
Notmen

You would have an extremely hard time doing domain migrations without a trust established. There are one-way and two-way trusts you can establish as well. In short this can go however you want it to but the cost/ money your company is willing to front is another story.

What some people do is either have it as trusts between forest or trusts between domain, in either case when you migrate objects of any kind you would want to use the ADMT tool.

You could setup a new forest and make both AD domains that are separate fall together under the new forest or you could make a trust between the two separate AD domains/ forests.

For VPN security you can use IPSEC and 802.1X security with a quarantine area setup to allow them to meet company standards like updated virus definitions before being allowed on the network internally.

Hi Jedi,

I think I need to clarify the options I am considering:

Option 1: Only do trusting between 2 forest/domain.

Option 2: Domin migration into 1 of the 2 domains. (sure trust will be extablished before doing migration)

Thanks.
Notmen

ADMT tool would be your best option for migrations. The con would depend on how many times a week or day would you be doing migrations?

As long as you have a trust and lync/ sharepoint is properly tied in with universal groups there should not be an issue on an AD admin side... In the beginning there will be some headaches though.