Setting up Second Trust
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
Setting up Second Trust

 
Post new topic   Reply to topic    Windows Server Forum Index -> Migration
Author Message
WooYing
Guest





Posted: Thu Jan 27, 2005 6:47 am    Post subject: Setting up Second Trust Reply with quote

Now sure if it can be done, but here it goes. I have 2 domain and let say
they are ABC (W2K3 AD) and 123 (NT4). Currently I have a trust relationship
between both domains, which is working just fine. I am planning to upgrade
the domain controller on the NT4 machine to a newer server (old and falling
apart). The reason why I want to upgrade to a newer server is that I would
like to upgrade the existing NT4 network to AD. The reason for a second
Trust is because there are database servers on the 123 domain that users on
the ABC domain needs to access. Even if I have to setup a second DC on the
ABC wouldn't be a problem but my main concern is minimal downtime.
One other idea was can I get the new server and put NT4 on it. Then put it
on the NT4 network as a BDC. Then promote it to a PDC but then will the
Trust Relationship transfer over to the new server that is running a NT4?
And the perform the upgrade? Any help will be appreciated. Thanks.
Back to top
Frances [MSFT]
Guest





Posted: Thu Jan 27, 2005 3:15 pm    Post subject: RE: Setting up Second Trust Reply with quote

Hello,

Good to hear from you.

According to your message, you want to set up a second trust because you
are worried that the users in ABC cannot access the database server when
you are upgrading 123. Is it correct?

Actually, the trust will remain after upgrading 123 to win2k domain or
win2k3 domain. Don¡¯t worry about it.

It seems that you will upgrade your NT domain. Do you want to use a new
server to replace the original PDC? If this is the case, I suggest that you
perform a ¡°not in place¡± upgrade since it is the easiest and lowest-risk
way to achieve your goal. I assume you will upgrade NT to win2k3 domain.
The upgrade goes like the following.


Performing a "not in place" upgrade
======================

1.Install NT 4.0 BDC on the new box.

2.Promote the BDC to the PDC, which demotes the PDC to a BDC.

3.Do a full backup of the former PDC and remove it from the network.

4.Upgrade the new PDC to Windows Server 2003. If you want to expand the
boot partition, please refer to the following KB:

325857 How To Expand the Boot Partition During a Windows Server 2003 Upgrade
http://support.microsoft.com/?id=325857

5.Use the Windows Server 2003 Active Directory wizard to turn on the
Active Directory service. The Active Directory service imports the existing
user accounts, groups, and other settings from the PDC.

6.Run your new Windows Server 2003 domain controller with Active Directory
for a test period.

7.If desired you can do a clean installation of Windows Server 2003 on the
former PDC, and bring it online as an Active Directory domain controller.

8.Transfer all Flexible Single-Master Operation (FSMO) roles to the new
Windows Server 2003 domain controller.

9.Verify all directory information has replicated.

10.Demote the first domain controller to a member server, and remove from
the domain.


As a kind reminder, please backup the whole system before you take any
action. Also, it is best if you perform the upgrade process during a
non-business time such as the weekend. The following article is offered for
your reference.

Background Information for Upgrading to Windows Server 2003 Active Directory
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deploy
guide/en-us/Default.asp?url=/resources/Documentation/WindowsServ/2003/all/de
ployguide/en-us/dssbe_upnt_huxa.asp


Hope this helps. If you have any further questions don't hesitate to get in
touch!


Best regards,

Frances He


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> Migration All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB