Domain and Backup server questions...

[Guest]

I am the network admin for a small school.

We have 2 servers

Calvaryadmin - works as a DNS, DHCP, PDC -for the CalvaryAcademy domain
Labserver - works as DNS, PDC for the CalvaryLab Domain

I have 2 questions? How do I create a trust between the two domains so that
a specific user in one domain can access file in the other domain. I have
teachers who use the Academy domain and would like to access students files
on the Lab domain? I need to make sure that only certain users can do this
and not the students.

Also is there a way I can have a server be the PDC for one domain and a BDC
for another domain at the same time?

 

[Doug Sherman [MVP]]

Well, if it were only one user or a very small group of users, I would say
forget about the trust. Give them user accounts in the lab domain and have
them connect by VPN or map a drive to the student files - see:

http://support.microsoft.com/default.aspx?scid=kb;en-us;102035 - title is
wrong.

If you have a large group of teachers, then the trust route may make more
sense - you can then give global groups in the Calvary academy domain access
to files in the lab domain. See:

http://www.microsoft.com/windows200...ios/trust_config_external_trust_relations.asp

and

http://www.microsoft.com/windows200...s/scenarios/trust_config_resource_sharing.asp

Doug Sherman
MCSE, MCSA, MCP+I, MVP

 

[Doug Sherman [MVP]]

Missed this part:

"Also is there a way I can have a server be the PDC for one domain and a BDC
for another domain at the same time?"

Answer = No, a Windows machine can only be joined to one domain per OS
installation. You might be able to use Virtual PC, but I don't think this
is a good idea for domain controllers.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

 

[Guest]

Since I would the group of teachers to be able to trust across the domains.
I am going to have go the trust route. When I looked at the links you
provided they were for other versions of windos server. I am running 2003.
When I pull up the properties of the domain and then go to the trusts tab, I
have the options of creating outgoing trusts and incoming trusts. Which ones
do I want to create so the teachers in the calvary academy domain can access
the files in the calvarylab domain?

 

[Doug Sherman [MVP]]

You want a one way incoming trust in the lab domain. For Windows Server
2003 see:

http://www.microsoft.com/technet/pr...elp/31915de7-ff58-4f26-a8ec-450ffca75912.mspx

and

http://www.microsoft.com/technet/pr...elp/31915de7-ff58-4f26-a8ec-450ffca75912.mspx

Doug Sherman
MCSE, MCSA, MCP+I, MVP