Domain controller Issue
Hi All,
Below picture is my current network diagram. Now i planning to combination all the resource. Can i combine two domain controller to become one ? If yes, how can i do that...?
So the Office A will become domain controller with two domain name - sonic.local & fosill.local
May 8th, 2012 3:04am
You will have to create the trust relation ship to achieve the above scenario.
http://technet.microsoft.com/en-us/library/cc740018(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc961481.aspxhttp://www.arabitpro.com
Free Windows Admin Tool Kit Click here and download it now
May 8th, 2012 3:25am
In addition to Syed.
Check these technet wiki artcles on managing trusts.
http://social.technet.microsoft.com/wiki/contents/articles/managing-trusts.aspx
Thanks
May 8th, 2012 3:37am
Hi,
This is a tricky question as I expect there's more to this than the explanation details. Rather than state an absolute answer, what I'll say is there are a few options available for you to explore:
Collapsing the domains while establishing multiple namespaces
The option allows you to collapse the fosill.local domain/forest into the sonic.local domain.forest through migrating the users from fosill.local to sonic.local with the Active Directory Migration Tool (ADMT
v3).
You can then establish a second
UPN suffix of fosill.local which may be of use if you have applications (including mail environments) that look to the UPN or derived addresses as a means of identification.
This option will allow you to decrease the number of required domain controllers the most, since it's effectively one domain/forest.
Somehow, I don't think this is the kind of solution you're looking for as in a migration scenario it's complex and probably doesn't offer what your two companies need in terms of legal separation. Nevertheless, it is an option.
Collapse the fosill.local domain into the sonic.local forest as a child domain
Again, this involves a migration from the current fosill.local domain/forest into a child domain where you've created a new
domain tree (which allows you to maintain two separate namespaces).
I'd expect this option might be viable based on how little information relating to your requirements is in the first post. This option at least provides for legal separation yet still allows you to leverage some of the same infrastructure (schema management,
dependant application deployment, shared services IT management, etc). It is also easier to provide continuity of namespace separation where it matters, such as for mail systems and the like.
This option can reduce your domain controller count by two at the most, which would only happen if the fosill.local domain had separated the Schema Master and Domain Naming Operations Master roles out onto two separate servers. The reality is though that
you probably wouldn't save on domain controllers at all since it's highly unlikley either role have been split out from the three domain-focused FSMO roles.
Maintain two separate forests
I expect this is what is already in place. It does require the highest number of domain controllers, but with a two-way trust in place both forests can be managed with relative ease. It provides complete legal separation and autonomous administration.
I don't know what else to write about this as it's such a simple option and I don't actually know what your objectives are yet.
If you could possibly provide some more information about why you're looking to collapse the two domains into one, or some such solution, we can try to give you a more in-depth response, advising you of the advantages and disadvantages of each model.
What we need to know are both the technical and business drivers for this change. What are you - and the business, hoping to achieve with this change?
Cheers,
Lain
Free Windows Admin Tool Kit Click here and download it now
May 8th, 2012 3:40am
Hello,
You cannot have one DC for 2 domains, this is NOT possible. You can use additional domain suffixes configured within AD domains and trusts.
"Now i planning to combination all the resource. Can i combine two domain controller to become one ? "
Not without migrating the domains into one with ADMT for example. But this result in one domain name as mentioned above.
Or you work with already mentioned trusts which will NOT combine anything. You'll keep both forests and are just able to access resources in the other one. So what will you need at the end?Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://msmvps.com/blogs/mweber/
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
May 8th, 2012 8:10am
It is not possible, as Meinolf mentioned, to have two domains on a single domain controller. I'm just curious, what are the reasons why you are opting to re-design your infrastructure this way?Regards,
Salvador Manaois III
MCSE MCSA CEH MCITP | Enterprise/Server Admin
Microsoft Certified Solutions Associate
http://www.badzmanaois.com
Free Windows Admin Tool Kit Click here and download it now
May 9th, 2012 2:47am
It is not possible, as Meinolf mentioned, to have two domains on a single domain controller. I'm just curious, what are the reasons why you are opting to re-design your infrastructure this way?
Regards,
Salvador Manaois III
MCSE MCSA CEH MCITP | Enterprise/Server Admin
Microsoft Certified Solutions Associate
http://www.badzmanaois.com
Due to the "Office B" Domain server going to end of life and we plan to combine all the resources to one data center.
It is not possible ? So i'm still need to maintain current network structure?
May 23rd, 2012 11:19pm
Hello,
you can run 2 domains on different domain controller in one location if that is your question, BUT not 2 domains on one domain controller.
So please clarify this.Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://msmvps.com/blogs/mweber/
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
May 24th, 2012 3:46am
Hello,
Can i use window 2008 Hyper-V? So that i can run 2 domain in one server.
Thanks.
May 24th, 2012 11:14pm
Hello,
as long as you install multiple servers then yes, BUT assure that netowrking is configured correct for each domain/subnet you use. Additional be aware that server running Hyper-V should NOT be used for any other server role.
Keep in mind that licensing must be correct for running the VMs on the host.Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://msmvps.com/blogs/mweber/
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
May 25th, 2012 3:49am
Thanks your advised.
May 28th, 2012 3:00am


