Options
Migrating NT domains to Active Directory 2003
meadIT
Member Posts: 581 ■■■■□□□□□□
Let's say you have three NT domains that house only user resources named EAST.MYCOMPANY.COM, CENTRAL.MYCOMPANY.COM, WEST.MYCOMPANY.COM. You then have four domains that hold computer, server, and printer resources. Each of the four resource domains trust the user domains and each of the user domains trust each other.
You'll be migrating the three user domains to AD domains and the resource domains will be OUs in the new network. How should you set up the external trusts during migration so that the users can access the NT resource domain resources. Would each of the resouce domains need to trust each of the new AD domains? Or would all 7 need to trust the new AD domains?
You'll be migrating the three user domains to AD domains and the resource domains will be OUs in the new network. How should you set up the external trusts during migration so that the users can access the NT resource domain resources. Would each of the resouce domains need to trust each of the new AD domains? Or would all 7 need to trust the new AD domains?
CERTS: VCDX #110 / VCAP-DCA #500 (v5 & 4) / VCAP-DCD #10(v5 & 4) / VCP 5 & 4 / EMCISA / MCSE 2003 / MCTS: Vista / CCNA / CCENT / Security+ / Network+ / Project+ / CIW Database Design Specialist, Professional, Associate
Comments
-
Options
royal
Member Posts: 3,352 ■■■■□□□□□□
Each NT4 domain would have a trust to AD. So when a user gets migrated over, they can still access resources via SIDHistory to any of the domains. At least this makes logical sense. I've never migrated NT4 so take what I said with a grain of salt.“For success, attitude is equally as important as ability.” - Harry F. Banks -
Options
blargoe
Member Posts: 4,174 ■■■■■■■■■□
It's been a while since I've done one... I'm assuming this is a migration to a completely different domain and not an upgrade...
At a minimum, there would have to be a trust between the each old NT domain and the corresponding new AD domain to be able to run the migration tool, and trusts between each of the AD domains and each of the resource domains for the users to continue to access the resources.IT guy since 12/00
Recent: 11/2019 - RHCSA (RHEL 7); 2/2019 - Updated VCP to 6.5 (just a few days before VMware discontinued the re-cert policy...)
Working on: RHCE/Ansible
Future: Probably continued Red Hat Immersion, Possibly VCAP Design, or maybe a completely different path. Depends on job demands...