Trust types

[Gaz]

I'm not really sure where to post this one. We've got 2 networks, one with server 2003 R2 DC and one with server 2008 R2 DC. These networks aren't connected by any means. We've just bought some laptops and I would like the laptops to be used on both networks. I know I need to use a domain trust to accomplish this but I don't want the networks to be connected, can a trust be established so that users can use these laptops on both networks but without the 2 DC's actually establishing the trust together?

 

Sorry If I've not explained that very well but if I need to rewrite it let me know.

[3s-gtech]

AFAIK, no. It works nicely once you have a two way trust in place, but what you're trying to do is join the laptops to both domains which isn't possible (again, to my knowledge). Is having a trust between the domains totally out of the question?

[Gaz]

The problem is we've got the two buildings with a public road in between and no money for a connection (wired or wireless) only the internet can be used to connect them and one of them has a static IP which is fine but the other site has a dynamic IP.

[sted]

you could sort of do it if the fileservers and users have the same names/ passwords with local accounts so they can use printers / file shares on both but that's a cludge at best. You can if your internet is up to it link them over the internet so that log ons in one domain can be authenticated in another I think. Might be simpler to set up something like a rodc or branchcache or even a vpn for those pcs so they still only log on to one domain but the domain can be "available" in 2 places at once

[jamesb]

No way I can think of to join them to two domains. Can you use DynDNS or something similar to set up a VPN and have a trust?

 

I suppose your other option, and this would be a real bodge, would be to either have them dual-boot or stick a virtual machine on and have each image joined to one of the domains.

[Gaz]

Cheers for the replies. I think its going to be a bit too much work for the reward so I'm just going to lock them into their respective domains for now with the exception of 1 which will definitely need to roam between sites I'll leave it off the domain.

We'll be renewing our DC next year so I'll revisit this then.

[sted]

if you have windows 7/8/8.1 enterprise you could set up a usb drive for them to boot to that connects to building 2's network using windows to go effectively dual booting the laptop (or indeed actually dual boot the laptop)