Synchronise user passwords across multiple untrusted domains

[LeightonJames]

Quick question for you all.

 

Where I work we are in the process of splitting our larger network into separate smaller domains for each school.

 

This makes it easier for us to manage individual changes to school setups. We have a number of technicians each with their own Admin account on each domain. We have our central server in the office and this too has our domain admin accounts on it.

 

Is it possible to synchronise the central server password with all the other school domains, thus eliminating the need to manually change it on all sites??

 

e.g.

 

Main Server

OU is technicians

Users are

Admin1

Admin2

Admin3

 

School Server 1

OU is technicians

Users are

Admin1

Admin2

Admin3

 

School Server 2

OU is technicians

Users are

Admin1

Admin2

Admin3

 

Admin 1 changes his password to ElephantTrunk2 on the main server and this is propogated to all the other servers at midnight that night.

 

Hope that makes sense as it does inside my head.

[psydii]

Is this not the exact scenario for a Multi-Domain Forest?

 

https://technet.microsoft.com/en-us/library/cc783351(v=ws.10).aspx

 

However as it is 2015 not 1999 and cloud identity is likely to be more important than on-prem identity soon, it might also be worth considering the information on this page:

https://azure.microsoft.com/en-gb/documentation/articles/active-directory-aadconnect/