New Domain

[ravenadsl]

Hi,

 

I'm planning a migration to server 2008R2 and windows 7 in the summer. so i want to make a 2008R2 domain and run it beside our 2003 domain. The plan is to build the GPO's and everything else in 2008R2 domain and make sure everything works while not affecting our current setup.

 

The problem is i need to have some servers on 2 domains (I think). so our current network works fine but the new domain has access to shared spaces and resources (eg. user spaces, G: drive for SIMS, printers)

 

The question is, can i set permissions for a users documents from 2 domains.

example.

Johns documents

 

Security,

domain\jhon Full access

domain2\jhon Full access

 

hope this makes scene

 

Thanks for any help.

[Firefox]

as long as you have a trust relationship setup between the 2 domain it shouldn't be a problem

[IanT]

Just curious, why don't u just migrate\transfer roles on the same domain or do you just wanna fresh\clean domain?

[ChrisH]

He probably wants to do the same as me and start fresh to gets rid of those little quirks that have shown up over the years and wont go away.

I did a similar thing years ago when I ran an NT4 domain side by side with my 2003 domain until I was completely migrated. I just used a script to do all the permissions and as already stated you need a trust in place. How well trusts work between 2003 and 2008 I dont know but I can't imagine that much has changed.

[ravenadsl]

He probably wants to do the same as me and start fresh to gets rid of those little quirks that have shown up over the years and wont go away.

I did a similar thing years ago when I ran an NT4 domain side by side with my 2003 domain until I was completely migrated. I just used a script to do all the permissions and as already stated you need a trust in place. How well trusts work between 2003 and 2008 I dont know but I can't imagine that much has changed.

 

Spot on. this domain was upgraded from NT4 and has some relay weird stuff going on. so i want to start fresh.

 

i better get googleing setting up a trust between them.

 

I currently having another problem with DNS. i dont want DNS and DHCP on the new server yet. so im using the DNS and DHCP that is currently running on my old domain. Im preaty sure i have to set soem stuff manually in DNS so the new domain name resolves to the correct IP address. is there anythign else i need to do??

[_Adam_]

I inherited a network a couple of years ago and shortly after starting the Proxy 2.0 server died and took out 5 servers with it. After a couple of weeks and calls to Microsoft Support I finally got the last user onto ISA 2006 instead of searching for the old Proxy server. After this I considered the network a mine field and did a total refresh as you're intending.

 

Keep this one this in mind - it took years to get everything as it was and to reproduce it to the same level is hard. We did insane hours over Summer for 2 months and then had a few months more fixing small quirks. For us it was worth it.

 

You can create a trust between domains in the same forest, or between forests if you create a new one as we did. You can set users from the old domain to have permissions in the new one. I would probably create a new subnet for the new domain as part of your migration, but that is just me.

 

Domain Admins group is global so you cannot for instance throw another domains user in there, but there is a way with universal groups of setting up permissions with shared resources. There is also a way to get a user on another domain as a domain admin but I could not find the process I used.

[JessicaD]

Ravenadsl,

Why do you think that you need to have some servers on 2 domains? Are you referring to a "pilot-like" test?

 

Also, Microsoft does have an official Windows 7 Support Forum located here Windows 7 IT Pro Category . It is supported by product specialists as well as engineers and support teams. You may want to also check the threads available there for additional assistance and guidance.

[ravenadsl]

Quick update.

 

I have to upgrade the functional level of my Live domain so i can make a trust relationship beterrn the domains. im wateing till the easter holidays to preform this task as Im not 100% sure if i need a restart or if users can login while i preform the update.

 

 

 

Ravenadsl,

Why do you think that you need to have some servers on 2 domains? Are you referring to a "pilot-like" test?

 

Also, Microsoft does have an official Windows 7 Support Forum located here Windows 7 IT Pro Category . It is supported by product specialists as well as engineers and support teams. You may want to also check the threads available there for additional assistance and guidance.

 

I want to run 2 domains side buy side. some clients will be windows 7 and some windows xp. this means some users will will be changeing from the windows xp domain to the windows 7 domain several times a day. the server with there my docs will need to have security for bothe users from both domains.

 

as Firefox said a trust relationship between the domains should do the trick.

 

Thanks for the link looks like there is some great information I can use on that form!

will give you your first thanks!

[_Adam_]

Pretty sure adprep and domainprep only take a few minutes each. Shouldn't affect logons and does not require a restart. But it's not something I do everyday so see if anyone else has some input.

[ravenadsl]

Pretty sure adprep and domainprep only take a few minutes each. Shouldn't affect logons and does not require a restart. But it's not something I do everyday so see if anyone else has some input.

 

Don't worry I need to take the servers down over easter anyways so I will do it at the same time.

 

Thanks