Sign in
 
HomeWindows Server 2012Windows Server 2008 R2Windows Server 2003LibraryForums
Windows Server TechCenter >
> 
> 
Domain controller Issue

Answered Domain controller Issue

  • Tuesday, May 08, 2012 7:04 AM
     
     
    Sign In to Vote
    0

    Hi All,

    Below picture is my current network diagram. Now i planning to combination all the resource. Can i combine two domain controller to become one ? If yes, how can i do that...? 

    So the Office A will become domain controller with two domain name  - sonic.local & fosill.local

     

All Replies

  • Tuesday, May 08, 2012 7:25 AM
     
     Proposed
    Sign In to Vote
    0

    You will have to create the trust relation ship to achieve the above scenario.

    http://technet.microsoft.com/en-us/library/cc740018(v=ws.10).aspx

    http://technet.microsoft.com/en-us/library/cc961481.aspx

    http://www.arabitpro.com

     
  • Tuesday, May 08, 2012 7:37 AM
     
     
    Sign In to Vote
    0
    In addition to Syed.

    Check these technet wiki artcles on managing trusts.
    http://social.technet.microsoft.com/wiki/contents/articles/managing-trusts.aspx


    Thanks
     
  • Tuesday, May 08, 2012 7:40 AM
     
     
    Sign In to Vote
    0

    Hi,

    This is a tricky question as I expect there's more to this than the explanation details. Rather than state an absolute answer, what I'll say is there are a few options available for you to explore:

    Collapsing the domains while establishing multiple namespaces

    The option allows you to collapse the fosill.local domain/forest into the sonic.local domain.forest through migrating the users from fosill.local to sonic.local with the Active Directory Migration Tool (ADMT v3).

    You can then establish a second UPN suffix of fosill.local which may be of use if you have applications (including mail environments) that look to the UPN or derived addresses as a means of identification.

    This option will allow you to decrease the number of required domain controllers the most, since it's effectively one domain/forest.

    Somehow, I don't think this is the kind of solution you're looking for as in a migration scenario it's complex and probably doesn't offer what your two companies need in terms of legal separation. Nevertheless, it is an option.


    Collapse the fosill.local domain into the sonic.local forest as a child domain

    Again, this involves a migration from the current fosill.local domain/forest into a child domain where you've created a new domain tree (which allows you to maintain two separate namespaces).

    I'd expect this option might be viable based on how little information relating to your requirements is in the first post. This option at least provides for legal separation yet still allows you to leverage some of the same infrastructure (schema management, dependant application deployment, shared services IT management, etc). It is also easier to provide continuity of namespace separation where it matters, such as for mail systems and the like.

    This option can reduce your domain controller count by two at the most, which would only happen if the fosill.local domain had separated the Schema Master and Domain Naming Operations Master roles out onto two separate servers. The reality is though that you probably wouldn't save on domain controllers at all since it's highly unlikley either role have been split out from the three domain-focused FSMO roles.


    Maintain two separate forests

    I expect this is what is already in place. It does require the highest number of domain controllers, but with a two-way trust in place both forests can be managed with relative ease. It provides complete legal separation and autonomous administration.

    I don't know what else to write about this as it's such a simple option and I don't actually know what your objectives are yet.


    If you could possibly provide some more information about why you're looking to collapse the two domains into one, or some such solution, we can try to give you a more in-depth response, advising you of the advantages and disadvantages of each model.

    What we need to know are both the technical and business drivers for this change. What are you - and the business, hoping to achieve with this change?

    Cheers,
    Lain

    • Edited by Lain Robertson Tuesday, May 08, 2012 8:04 AM Re-establishing the links that were also lost.
    •  
     
  • Tuesday, May 08, 2012 12:10 PM
     
     Answered
    Sign In to Vote
    0

    Hello,

    You cannot have one DC for 2 domains, this is NOT possible. You can use additional domain suffixes configured within AD domains and trusts.

    "Now i planning to combination all the resource. Can i combine two domain controller to become one ? "

    Not without migrating the domains into one with ADMT for example. But this result in one domain name as mentioned above.

    Or you work with already mentioned trusts which will NOT combine anything. You'll keep both forests and are just able to access resources in the other one. So what will you need at the end?

    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

     
  • Wednesday, May 09, 2012 6:47 AM
     
     
    Sign In to Vote
    0

    It is not possible, as Meinolf mentioned, to have two domains on a single domain controller. I'm just curious, what are the reasons why you are opting to re-design your infrastructure this way?

    Regards,
    Salvador Manaois III
    MCSE MCSA CEH MCITP | Enterprise/Server Admin
    Microsoft Certified Solutions Associate
    http://www.badzmanaois.com

     
  • Thursday, May 24, 2012 3:17 AM
     
     
    Sign In to Vote
    0

    It is not possible, as Meinolf mentioned, to have two domains on a single domain controller. I'm just curious, what are the reasons why you are opting to re-design your infrastructure this way?

    Regards,
    Salvador Manaois III
    MCSE MCSA CEH MCITP | Enterprise/Server Admin
    Microsoft Certified Solutions Associate
    http://www.badzmanaois.com

    Due to the "Office B"   Domain server going to end of life and we plan to combine all the resources to one data center. 

    It is not possible ? So i'm still need to maintain current network structure? 

     
  • Thursday, May 24, 2012 7:45 AM
     
     
    Sign In to Vote
    0

    Hello,

    you can run 2 domains on different domain controller in one location if that is your question, BUT not 2 domains on one domain controller.

    So please clarify this.

    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

     
  • Friday, May 25, 2012 3:12 AM
     
     
    Sign In to Vote
    0

    Hello,

    Can i use window 2008 Hyper-V? So that i can run 2 domain in one server.

    Thanks.  

     
  • Friday, May 25, 2012 7:46 AM
     
     
    Sign In to Vote
    0

    Hello,

    as long as you install multiple servers then yes, BUT assure that netowrking is configured correct for each domain/subnet you use. Additional be aware that server running Hyper-V should NOT be used for any other server role.

    Keep in mind that licensing must be correct for running the VMs on the host.

    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

     
  • Monday, May 28, 2012 6:58 AM
     
     
    Sign In to Vote
    0
    Thanks your advised.