Windows Thread, 2 Seperate DC's Syncing users? in Technical; We run a seperate network using the 172. range which we've setup for 1 music block. Mainly so we can ...
2nd June 2008, 09:38 PM #1
- Rep Power
2 Seperate DC's Syncing users?
We run a seperate network using the 172. range which we've setup for 1 music block. Mainly so we can test, but it also contains alot of media etc so its ideal keeping it off the main school network.
I've setup a new DELL quad core server running x64 Win 2k8 Standard but want to bulk import all existing users from the schools domain to the music domain.
Ive done looads of research into sync'ing users from 1 AD to another but it doesnt appear to be possible unless its a sub-domain in a forest.
Im also doing a cisco course so figured, perhaps I can link between the 2 seperate DC's you see and make them work like that - simply sync users and nothing else.
I might just end up having manditory profiles and just several year group users and only setup individual students that are doing GCSE's and AS/A levels...
what would you recommend?
IDG Tech News
2nd June 2008, 09:42 PM #2
What will you achieve by music having there own domain?
2nd June 2008, 09:49 PM #3
- Rep Power
Well we have 2 new technicians under a trainee contract, it's a great oportunity for them to setup a LAN and server from scratch before we put them in the drivers seat of the main DOMAIN. I learnt most of my experiance and knowledge setting up the music block and feel its a great idea to continue doing so. It's never had decent workstations, only scraps which we would normally skip.
Originally Posted by FN-Greatermanchester
So every 2 years they get the next load of old workstations, no money has ever been set aside for them because they don't get enough students taking on music courses.
The only new bit of kit is the server, not costing alot but would hold the music files and steam multimedia.
2nd June 2008, 09:51 PM #4
If want to do that I would keep it totally separate from the main network.
2nd June 2008, 10:54 PM #5
I don't know of any automatic way of doing this with AD. The best segmentation you could get would be a domain trust between the two I believe that you can make these one way.
You could keep it all in the same domain but add a separate network adapter on a different subnet for just the replication to run over which would isolate the actual music stations from the primary network.
3rd June 2008, 09:15 AM #6
The easiest option is to make them both the same network and have one as a second domain controller. The next easiest option is to keep them as two entire seperate networks.
However, to have a 'two seperate networks, but not really GUV' type scenario I think what you want is a trust relationship between a couple of domains. I'm a bit sketchy on the details since I've never done it before.
I don't think a trust relationship synchs users as such though but may do authentication type things for you, like I said, not my area of expertise.
Last edited by Friez; 3rd June 2008 at 09:18 AM.
3rd June 2008, 10:15 AM #7
When you say sync users, what do you actually mean? Do you mean you want to maintain 2 different directories but have them somehow update each other i.e. change 1 users detail in 1 affects the other or do you just mean a user in the other directory can access resources to the different domain. When you say domain, are you taking about 2 forests, trees..?
3rd June 2008, 10:23 AM #8
I think I would keep it to just one domain.
In Active Directory I would create an OU for the music dept. and delegate control to the techs that you want to administer it. They could add and remove computers and users as neccassary, create and link GPO's, etc. without effecting the whole of the domain, and of course importantly you could still maintain overall control.
3rd June 2008, 12:37 PM #9
Interdomain (forest in this case) trust. This would allow main domain users to appear in the music dept ad, so the could be added to groups etc.
GPOs etc would still be completey seperate.
This seems to be how a number of RBCs are looking at single sign on.
By boomam in forum Windows
Last Post: 5th February 2008, 04:46 PM
By triggmiester in forum Windows
Last Post: 11th June 2007, 09:55 PM
By thom in forum How do you do....it?
Last Post: 1st February 2007, 03:49 PM
By dezt in forum Wireless Networks
Last Post: 6th November 2006, 11:09 PM
By j17sparky in forum Web Development
Last Post: 17th October 2006, 08:27 AM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)