R
Ray
Hi,
How do I join my NT Domain to my 2000 Domain, do I use
trusts or ADMT.
Thanks.
Ray.
How do I join my NT Domain to my 2000 Domain, do I use
trusts or ADMT.
Thanks.
Ray.
C
Cary Shultz [A.D. MVP]
Neither!
I would use NETDOM to do this. When you have a down-level situation ( WINNT
4.0 and WIN2000 ) you should consider using NETDOM ( from the WIN2000
Support Tools - located either on the WIN2000 Server CD or on the WIN2000
Service Pack CD in the Support | Tools folder ). If you use the Active
Directory Domains and Trusts MMC it will probably work - but possibly not.
Even if you do everything correctly it *could* fail and you would spend a
whole lotta time trying to figure out why. I have seen this myself. You
need to make sure that your LMHOSTS file is correct. Spacing is important.
I recently posted a response to a similar question. I will simply copy and
paste from that:
Here are the two LMHOSTS that you will need as well as the syntax for netdom
when creating the trusts:
=======================================================================
LMHOSTS file on the WINNT PDC: 192.168.1.30 "MY2KDOM \0x1B"
#PRE
LMHOSTS file on the WIN2K DC: 172.16.15.30 "MYNT4DOM \0x1B"
#PRE
NETDOM syntax:
netdom trust mynt4dom /D:my2kdomaim.com /User0:NTAdministrator
/Password0
asswordNT /UserD:2KAdministrator /PasswordDassword2K /add
/twoway
============================================================================
If you want more details then look for a posting from ZIA on 03/03/2004
entitled "Trust Relationship between NT and W2K".
BTW - ADMT ( or Active Directory Migration Tool ) has nothing to do with
initially setting up the Trust. You would use it AFTER you have already
created the Trust to then migrate users and computers and groups. ADMT v2
allows you to migrate passwords as well....The Destination Domain (
WIN2000 ) needs to be in Native Mode.
HTH,
Cary
I would use NETDOM to do this. When you have a down-level situation ( WINNT
4.0 and WIN2000 ) you should consider using NETDOM ( from the WIN2000
Support Tools - located either on the WIN2000 Server CD or on the WIN2000
Service Pack CD in the Support | Tools folder ). If you use the Active
Directory Domains and Trusts MMC it will probably work - but possibly not.
Even if you do everything correctly it *could* fail and you would spend a
whole lotta time trying to figure out why. I have seen this myself. You
need to make sure that your LMHOSTS file is correct. Spacing is important.
I recently posted a response to a similar question. I will simply copy and
paste from that:
Here are the two LMHOSTS that you will need as well as the syntax for netdom
when creating the trusts:
=======================================================================
LMHOSTS file on the WINNT PDC: 192.168.1.30 "MY2KDOM \0x1B"
#PRE
LMHOSTS file on the WIN2K DC: 172.16.15.30 "MYNT4DOM \0x1B"
#PRE
NETDOM syntax:
netdom trust mynt4dom /D:my2kdomaim.com /User0:NTAdministrator
/Password0
asswordNT /UserD:2KAdministrator /PasswordDassword2K /add/twoway
============================================================================
If you want more details then look for a posting from ZIA on 03/03/2004
entitled "Trust Relationship between NT and W2K".
BTW - ADMT ( or Active Directory Migration Tool ) has nothing to do with
initially setting up the Trust. You would use it AFTER you have already
created the Trust to then migrate users and computers and groups. ADMT v2
allows you to migrate passwords as well....The Destination Domain (
WIN2000 ) needs to be in Native Mode.
HTH,
Cary