Wndows 2000 and 2003 forests and domains

  • Thread starter Thread starter gurvinder.nijjar
  • Start date Start date
G

gurvinder.nijjar

We are currently running a native windows 2000 forest and domain, which has
4 sites and subnet. We are only running windows 2000 domain controllers We
have recently acquired a new company which is running a windows 2003 Forest
and a domain, where they have only windows 2003 domain controllers. We want
to connect the domains together. What would be the bets way to do this.

Is it best to create a trust between the 2 forests. Can this be done
between a windows 2000 forest and a windows 2003 forest.

Would be possible to add the windows 2003 forest, in our windows 2000
domain.

Does anyone have any suggestions or any good links.

Thanks
 
Best thing is a trust between the domain(s) in each domain. It sounds to me
like you have only oen domain in each forest, just make a two way trust
between teh domains and you'll be able to cross-auth and secure resources
fairly easily.

Remember, the forest is the container for all the domains. You can't have a
forest inside of a domain, so to speak.

In order to have a forest trust, you need to be a completely W2003 AD - all
DCs have to be upgraded, domains need to be in 2k3 functional level and the
forest has to be 2k3 functional level.

--
Thanks,
Brian Desmond
Windows Server MVP

www.briandesmond.com
 
We are currently running a native windows 2000 forest and
domain, which has
4 sites and subnet. We are only running windows 2000 domain
controllers We
have recently acquired a new company which is running a
windows 2003 Forest
and a domain, where they have only windows 2003 domain
controllers. We want
to connect the domains together. What would be the bets way
to do this.

Is it best to create a trust between the 2 forests. Can this
be done
between a windows 2000 forest and a windows 2003 forest.

Would be possible to add the windows 2003 forest, in our
windows 2000
domain.

Does anyone have any suggestions or any good links.

Thanks
Click to expand...

The best way to "connect" both forest is to create a trust between
them. To be able to create a trust you need to make nameresolution
possible between the forests.

No, it is not possible to "cut and paste" one forest or domain into
another forest. At this moment it is only possible to create a trust
between them and migrate one forest/domain into the other using a
migration like ADMT or third party tool
 
Back
Top