Thursday, March 19, 2015

active directory - Joining 2 Domain Trees to New Forest and Preserving Non-Contiguous Namespaces & Schemas

I'm working on a project to use DFS file replication between our site and our sister site. Each site has its own domain as forest root, all DC's run Win2012R2:




corp.company.co.uk is one domain and corp.company.de is the other. These domains were set up independantly but now corporate structure has changed, we need to share files and we think DFS is the best way to do it.



The sites are currently joined with a forest trust, over a VPN, authentication and resource sharing work fine through it, but after reading up on DFS I have found out that it does not work between forests.



If I joined both of these domains to a new forest (maybe they could live in the forest of corp.companyGroup.co.uk), would I be able to keep the existing discontiguous domain trees, schemas and SID's etc. without a huge migration project?



It was only supposed to be a small project to get file replication working between the two sites, but my current research suggests that to get DFS working I will have to use ADMT to migrate both domains to the new forest, which will be a big project (~50 users at each site). It will make sense eventually to use contiguous child domains, but I just wanted to verify my thought process before I committed any significant hours to the project.



Many thanks!

No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...