Windows Forum

Ask something
Discussion Locked

Active Directory

0 helpful
3 replies

by adminw

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Our 2000 Active Directory structure consists of numerous child domains at our remote sites (a DC for that child domain is at each site). How can we cleanly break that domain off from the parent site and still have the child domain function on its own (become it's own parent)without rebuilding the domain and losing it's sam information (user accounts, groups, etc.)

3 replies

by widgey woo

This is a wild stab at a difficult question, if your w2k AD domain is native and using kerberos transitive trusts, I had a thought can you not change to using a single one way explicit trust so that your domain is not trusted by its original parent domain work? But I suppose that users in the original parent could still access resoruces in your domain unless you configure a gpo on your child domain.
You can define explicit one-way trust relationships as necessary through the domain properties in the Site Manager snap-in.

hope this gives you some help

This discussion is closed to new replies.