Multiple Domains

Currently I have a Windows 2000 that serves out IP address and the login
script. The company I work for has split into two different companies. What
I am trying to do is split the users off the company 1 2000 server. So I
just purchased a Windows 2003 Server. What is the best way to setup that
server so that company 2 employees only log into the 2003 server and not see
the 2000 server anymore. I want the 2003 server to handout IP address and
run Active Directory for the company 2 users. I hope this is making sense.

Thanks,

Shawn

You will need to physically separate the two networks. You cannot run
two DHCP servers (ie the program which hands out the IP and other network
config) on the same segment. They work by broadcasting, and there is no way
to force a client machine to use a particular DHCP server.

S Lane wrote:
> Currently I have a Windows 2000 that serves out IP address and the
> login script. The company I work for has split into two different
> companies. What I am trying to do is split the users off the company
> 1 2000 server. So I just purchased a Windows 2003 Server. What is
> the best way to setup that server so that company 2 employees only
> log into the 2003 server and not see the 2000 server anymore. I want
> the 2003 server to handout IP address and run Active Directory for
> the company 2 users. I hope this is making sense.
>
> Thanks,
>
> Shawn

"S Lane" <(E-Mail Removed)> wrote in message
news:BE101042-E5C2-4BB0-9B85-(E-Mail Removed)...
> Currently I have a Windows 2000 that serves out IP address and the login
> script. The company I work for has split into two different companies.
What
> I am trying to do is split the users off the company 1 2000 server. So I
> just purchased a Windows 2003 Server. What is the best way to setup that
> server so that company 2 employees only log into the 2003 server and not
see
> the 2000 server anymore. I want the 2003 server to handout IP address and
> run Active Directory for the company 2 users. I hope this is making
sense.

You have to just create a new domain by building a new DC. Depending on the
number of effected employees, you may be just as well off manually creating
their accounts in the new domain rather than all the fooling around you'd
have to do with the Active directory migration Tool (ADMT). The
workstations you just simply join them to the new domain. Bill already
mentioned dealing with the physical topology and the DHCP.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

Thank you for your help. I really do appreciate it. If I don't seperate the
network physically will it be okay to continue having the other W2K server
give out the IP addresses?

"Bill Grant" wrote:

> You will need to physically separate the two networks. You cannot run
> two DHCP servers (ie the program which hands out the IP and other network
> config) on the same segment. They work by broadcasting, and there is no way
> to force a client machine to use a particular DHCP server.
>
> S Lane wrote:
> > Currently I have a Windows 2000 that serves out IP address and the
> > login script. The company I work for has split into two different
> > companies. What I am trying to do is split the users off the company
> > 1 2000 server. So I just purchased a Windows 2003 Server. What is
> > the best way to setup that server so that company 2 employees only
> > log into the 2003 server and not see the 2000 server anymore. I want
> > the 2003 server to handout IP address and run Active Directory for
> > the company 2 users. I hope this is making sense.
> >
> > Thanks,
> >
> > Shawn
>
>
>

"S Lane" <(E-Mail Removed)> wrote in message
news:EA65A84D-A2B6-41E2-B763-(E-Mail Removed)...
> Thank you for your help. I really do appreciate it. If I don't seperate
the
> network physically will it be okay to continue having the other W2K server
> give out the IP addresses?

Yes you can. You can change that later after everything else is done. DHCP
Servers are not "aware" of domains and don't care about domains. They do
have to be authorized by a DC, but that is not the same thing.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Deployment Guidelines for ISA Server 2004 Enterprise Edition
http://www.microsoft.com/technet/pro...isaserver.mspx
-----------------------------------------------------

I have one more question. I have the server setup and now when I try to join
a computer to the new doamin I get the following error message.
The following error occurred attempting to join the domain "vcpg":
Access is denied.

What am I doing wrong? Is there something on the server I have not
configured. Thank you again for all your help.

Shawn

"Phillip Windell" wrote:

> "S Lane" <(E-Mail Removed)> wrote in message
> news:BE101042-E5C2-4BB0-9B85-(E-Mail Removed)...
> > Currently I have a Windows 2000 that serves out IP address and the login
> > script. The company I work for has split into two different companies.
> What
> > I am trying to do is split the users off the company 1 2000 server. So I
> > just purchased a Windows 2003 Server. What is the best way to setup that
> > server so that company 2 employees only log into the 2003 server and not
> see
> > the 2000 server anymore. I want the 2003 server to handout IP address and
> > run Active Directory for the company 2 users. I hope this is making
> sense.
>
> You have to just create a new domain by building a new DC. Depending on the
> number of effected employees, you may be just as well off manually creating
> their accounts in the new domain rather than all the fooling around you'd
> have to do with the Active directory migration Tool (ADMT). The
> workstations you just simply join them to the new domain. Bill already
> mentioned dealing with the physical topology and the DHCP.
>
> --
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>
>

Make sure the client is using the correct DNS Server for the "vcpg" domain.
A WINS Server us usually "handy" as well for older clients.

If you have to statically configure all the TCP/IP settings then do
it,...you can worry about DHCP later after everything works.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Deployment Guidelines for ISA Server 2004 Enterprise Edition
http://www.microsoft.com/technet/pro...isaserver.mspx
-----------------------------------------------------



"S Lane" <(E-Mail Removed)> wrote in message
news:9F2859EA-9310-4835-B2AB-(E-Mail Removed)...
> I have one more question. I have the server setup and now when I try to
join
> a computer to the new doamin I get the following error message.
> The following error occurred attempting to join the domain "vcpg":
> Access is denied.
>
> What am I doing wrong? Is there something on the server I have not
> configured. Thank you again for all your help.
>
> Shawn
>
> "Phillip Windell" wrote:
>
> > "S Lane" <(E-Mail Removed)> wrote in message
> > news:BE101042-E5C2-4BB0-9B85-(E-Mail Removed)...
> > > Currently I have a Windows 2000 that serves out IP address and the
login
> > > script. The company I work for has split into two different
companies.
> > What
> > > I am trying to do is split the users off the company 1 2000 server.
So I
> > > just purchased a Windows 2003 Server. What is the best way to setup
that
> > > server so that company 2 employees only log into the 2003 server and
not
> > see
> > > the 2000 server anymore. I want the 2003 server to handout IP address
and
> > > run Active Directory for the company 2 users. I hope this is making
> > sense.
> >
> > You have to just create a new domain by building a new DC. Depending on
the
> > number of effected employees, you may be just as well off manually
creating
> > their accounts in the new domain rather than all the fooling around
you'd
> > have to do with the Active directory migration Tool (ADMT). The
> > workstations you just simply join them to the new domain. Bill already
> > mentioned dealing with the physical topology and the DHCP.
> >
> > --
> > Phillip Windell [MCP, MVP, CCNA]
> > www.wandtv.com
> >
> >
> >