Networking Forums

Networking Forums > Computer Networking > Windows Networking > Second Trust

Reply
 
 
=?Utf-8?B?V29vWWluZw==?=
Guest
Posts: n/a

 
      01-27-2005, 02:25 AM
Now sure if it can be done, but here it goes. I have 2 domain and let say
they are ABC (W2K3 AD) and 123 (NT4). Currently I have a trust relationship
between both domains, which is working just fine. I am planning to upgrade
the domain controller on the NT4 machine to a newer server (old and falling
apart). The reason why I want to upgrade to a newer server is that I would
like to upgrade the existing NT4 network to AD. The reason for a second
Trust is because there are database servers on the 123 domain that users on
the ABC domain needs to access. Even if I have to setup a second DC on the
ABC wouldn't be a problem but my main concern is minimal downtime.
One other idea was can I get the new server and put NT4 on it. Then put it
on the NT4 network as a BDC. Then promote it to a PDC but then will the
Trust Relationship transfer over to the new server that is running a NT4?
And the perform the upgrade? Any help will be appreciated. Thanks.
 
Reply With Quote
 
 
 
 
Steven L Umbach
Guest
Posts: n/a

 
      01-27-2005, 06:27 AM
This is a question you should post in an Active_directory newsgroup also.
You can only have one trust between domains in a particular direction -
incoming or outgoing. The existing trust "should" hold when you do the
upgrade of an existing NT 4.0 domain controller. However I would recommend
that you upgrade the existing NT4.0 domain controller to Windows 2003 domain
controller, then install the new domain controller with Windows 2003 and let
AD replicate to it. That way you would have a clean install of Windows 2003
on it. Then you could transfer the fsmo roles and global catalog server over
to the new W2003 DC, make sure dns is configured correctly for the domain
for the domain controller and domain members and decommission the other old
W2003 domain controller if need be though it really makes sense to have two
domain controllers per domain. The gurus in the Active_Directory newsgroups
can help you further with their experiences to minimize downtime and you
also need to decide if you want to be two domains in one forest or two
separate forests. --- Steve


"WooYing" <(E-Mail Removed)> wrote in message
news:B00D04A4-97D7-472D-B1E1-(E-Mail Removed)...
> Now sure if it can be done, but here it goes. I have 2 domain and let say
> they are ABC (W2K3 AD) and 123 (NT4). Currently I have a trust
> relationship
> between both domains, which is working just fine. I am planning to
> upgrade
> the domain controller on the NT4 machine to a newer server (old and
> falling
> apart). The reason why I want to upgrade to a newer server is that I
> would
> like to upgrade the existing NT4 network to AD. The reason for a second
> Trust is because there are database servers on the 123 domain that users
> on
> the ABC domain needs to access. Even if I have to setup a second DC on
> the
> ABC wouldn't be a problem but my main concern is minimal downtime.
> One other idea was can I get the new server and put NT4 on it. Then put
> it
> on the NT4 network as a BDC. Then promote it to a PDC but then will the
> Trust Relationship transfer over to the new server that is running a NT4?
> And the perform the upgrade? Any help will be appreciated. Thanks.



 
Reply With Quote
 
=?Utf-8?B?V29vWWluZw==?=
Guest
Posts: n/a

 
      01-27-2005, 10:09 PM
Steve thank you, you are very much. Your information was very helpful. One
question if I were to upgrade my current PDC to Windows 2003 and then AD will
take into effect, right? Since it see it as a pdc. Then what about my other
BDC? How will AD treat my other BDC? Grant yes it will be in mix mode. See
I have other regions (Out of state) going over ATM and at each locations we
have DHCP and it's a print server. I guess the question is will it be okay?
Thanks you again you have shed some new light in my direction.

"Steven L Umbach" wrote:

> This is a question you should post in an Active_directory newsgroup also.
> You can only have one trust between domains in a particular direction -
> incoming or outgoing. The existing trust "should" hold when you do the
> upgrade of an existing NT 4.0 domain controller. However I would recommend
> that you upgrade the existing NT4.0 domain controller to Windows 2003 domain
> controller, then install the new domain controller with Windows 2003 and let
> AD replicate to it. That way you would have a clean install of Windows 2003
> on it. Then you could transfer the fsmo roles and global catalog server over
> to the new W2003 DC, make sure dns is configured correctly for the domain
> for the domain controller and domain members and decommission the other old
> W2003 domain controller if need be though it really makes sense to have two
> domain controllers per domain. The gurus in the Active_Directory newsgroups
> can help you further with their experiences to minimize downtime and you
> also need to decide if you want to be two domains in one forest or two
> separate forests. --- Steve
>
>
> "WooYing" <(E-Mail Removed)> wrote in message
> news:B00D04A4-97D7-472D-B1E1-(E-Mail Removed)...
> > Now sure if it can be done, but here it goes. I have 2 domain and let say
> > they are ABC (W2K3 AD) and 123 (NT4). Currently I have a trust
> > relationship
> > between both domains, which is working just fine. I am planning to
> > upgrade
> > the domain controller on the NT4 machine to a newer server (old and
> > falling
> > apart). The reason why I want to upgrade to a newer server is that I
> > would
> > like to upgrade the existing NT4 network to AD. The reason for a second
> > Trust is because there are database servers on the 123 domain that users
> > on
> > the ABC domain needs to access. Even if I have to setup a second DC on
> > the
> > ABC wouldn't be a problem but my main concern is minimal downtime.
> > One other idea was can I get the new server and put NT4 on it. Then put
> > it
> > on the NT4 network as a BDC. Then promote it to a PDC but then will the
> > Trust Relationship transfer over to the new server that is running a NT4?
> > And the perform the upgrade? Any help will be appreciated. Thanks.

>
>
>

 
Reply With Quote
 
Steven L Umbach
Guest
Posts: n/a

 
      01-28-2005, 07:31 AM
Yes when you upgrade the existing NT4.0 PDC to Windows 2003 you will have an
Active Directory domain in mixed mode. The other BDC will replicate with the
new AD domain controller to maintain the user accounts. I would be sure to
make full image [ such as Ghost] backup of your current PDC before the
upgrade just in case there is a problem and the last link below should help.
You may have to adjust "security options" in Domain Controller Security
policy for your new Windows 2003 domain controller to work well with your
BDC. See the first link below for security settings and "examples of
compatibility problems" as Windows 2003 by default is much more secure than
NT4.0 or Windows 2000. I also encourage you to post in the active_directory
newsgroup about the change from NT4.0 to Windows 2003 to see if they have
any further advice to help you be best prepared. --- Steve

http://support.microsoft.com/default...b;en-us;823659
http://www.computerperformance.co.uk...tevupgrade.htm

"WooYing" <(E-Mail Removed)> wrote in message
news:0BDA07CF-51DC-4C08-BDBE-(E-Mail Removed)...
> Steve thank you, you are very much. Your information was very helpful.
> One
> question if I were to upgrade my current PDC to Windows 2003 and then AD
> will
> take into effect, right? Since it see it as a pdc. Then what about my
> other
> BDC? How will AD treat my other BDC? Grant yes it will be in mix mode.
> See
> I have other regions (Out of state) going over ATM and at each locations
> we
> have DHCP and it's a print server. I guess the question is will it be
> okay?
> Thanks you again you have shed some new light in my direction.
>
> "Steven L Umbach" wrote:
>
>> This is a question you should post in an Active_directory newsgroup also.
>> You can only have one trust between domains in a particular direction -
>> incoming or outgoing. The existing trust "should" hold when you do the
>> upgrade of an existing NT 4.0 domain controller. However I would
>> recommend
>> that you upgrade the existing NT4.0 domain controller to Windows 2003
>> domain
>> controller, then install the new domain controller with Windows 2003 and
>> let
>> AD replicate to it. That way you would have a clean install of Windows
>> 2003
>> on it. Then you could transfer the fsmo roles and global catalog server
>> over
>> to the new W2003 DC, make sure dns is configured correctly for the domain
>> for the domain controller and domain members and decommission the other
>> old
>> W2003 domain controller if need be though it really makes sense to have
>> two
>> domain controllers per domain. The gurus in the Active_Directory
>> newsgroups
>> can help you further with their experiences to minimize downtime and you
>> also need to decide if you want to be two domains in one forest or two
>> separate forests. --- Steve
>>
>>
>> "WooYing" <(E-Mail Removed)> wrote in message
>> news:B00D04A4-97D7-472D-B1E1-(E-Mail Removed)...
>> > Now sure if it can be done, but here it goes. I have 2 domain and let
>> > say
>> > they are ABC (W2K3 AD) and 123 (NT4). Currently I have a trust
>> > relationship
>> > between both domains, which is working just fine. I am planning to
>> > upgrade
>> > the domain controller on the NT4 machine to a newer server (old and
>> > falling
>> > apart). The reason why I want to upgrade to a newer server is that I
>> > would
>> > like to upgrade the existing NT4 network to AD. The reason for a
>> > second
>> > Trust is because there are database servers on the 123 domain that
>> > users
>> > on
>> > the ABC domain needs to access. Even if I have to setup a second DC on
>> > the
>> > ABC wouldn't be a problem but my main concern is minimal downtime.
>> > One other idea was can I get the new server and put NT4 on it. Then
>> > put
>> > it
>> > on the NT4 network as a BDC. Then promote it to a PDC but then will
>> > the
>> > Trust Relationship transfer over to the new server that is running a
>> > NT4?
>> > And the perform the upgrade? Any help will be appreciated. Thanks.

>>
>>
>>



 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
domain trust Blake Windows Networking 3 11-14-2008 04:05 PM
trust issues =?Utf-8?B?RGFuaWUgRGFuaWU=?= Windows Networking 1 04-19-2005 12:01 AM
Trust 2 Ramon Niese Windows Networking 5 07-27-2004 01:08 PM
NT4 Trust across a VPN NAT HELP Fast Eddie Windows Networking 1 06-17-2004 02:14 PM
Trust Relationship Windows Networking 1 04-15-2004 09:38 PM



1 2 3 4 5 6 7 8 9 10 11