Networks

Ask something
Discussion Locked

Multiple logon Domains

0 helpful
3 replies

by integrity

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi all

I work for a charity/voluntary, saying that I shouldn't need to point out that money is tight, so try to keep the solutions down to spending very little, and I mean very very little :)

Ok heres the thing, what we want to do enable two organisations within two different domains, connected via an Intranet VPN 512k ADSL link to act as a backup to each other.
So if one goes down and it will take a while to get another, the users of one domain can logon to the other domain and access all the resources belonging to their usual domain, on the temprary domain.

I am thinking of creating a forest transitive trust, then simply replicating all data required to each others PDC.

What would be the simpliest way of doing this?
Can it be done?
Are there any other ways to do this?
If this is possible can I edit a registry entry to allow more than one domain to log into at the Network Logon screen?
I know the second domain will appear once there is a trust created but I don't want users to do this unless the need actually arises.

Help appreciated

3 replies

by inletgrovehs

Anything preventing you from merging them onto one domain with Primary and Backup DC?

If you were to setup as two different domains and try to use each other as backups you would then have to create duplicate users on each of the domains so that they could login to both.

Are the DCs the only servers you use? If not you would have to adjust the permissions on the servers to allow the user to connect from either domain.

Replicating the data across an ADSL connect would likely suck up a lot of bandwidth.

There are many issues that I can think of working against you on this. Working where I am now I have to work with three different domains. I wish they would consolidate them to one... File permission / security issues are insane....

by integrity

Yes the DC's mentioned are the only ones used, very little money these places you know ;)
Replication of data after the initial replication wouldn't be bad as the amount of data held isn't all that much.
I can think of many reasons why not to do this also, but, unfortunately my superiors want it done and I can only do what they ask. I have told them about the potential security/permissions nightmare but they don't seem concerned and still want me to go ahead anyway *sigh

You'll get the points because you are the only one thats answered my question, your answers are the same as what I had already thought but I thought I'd just ask here to see if anyone had any better ideas.
Consolidation, at this moment in time is not an option unfortunatley :(

This discussion is closed to new replies.