Windows Forum

Ask something
Discussion Locked

Joining two domains

0 helpful
6 replies

by dolanjs

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I was in someone else's office one afternoon last week and I noticed that when their users went to log onto Win2K that they had three option for the domain on the logon screen. 1) the local computer 2) domain "a" 3) Domain "b" I couldn't not figure out how they were able to add one computer with only one nic to 2 different domains. If any one knows how to do this and can point me in the right direction it would be helpfull.
Thank you

6 replies

by j.a.lawrence

On the DC, run Active Directory Domains & Trusts.
Right click on your domain, & add trust, & add the target domain.

Do the same thing on the other DC to setup two way trusts.

The help is pretty good on this to explain the full setup.

by dolanjs

Unfortunatly due to shop policy that can not be changed we are not allowed to set up any trusts. I was looking for an answer that allows the user to choose which domain he or she will log onto at the logon screen.

by joseph moore

Answer1 told you how to set up a Trust. That is the answer to your question.
In the Domain drop down, you see the 2 different domains NOT because the individual workstation clients are members of 2 domains, you see them both because of the Trust.DOMAIN_A trusts DOMAIN_B and vica versa.
Clients connected to DOMAIN_A are ONLY connected to DOMAIN_A. If you opened AD Users & Computers in DOMAIN_B, you would NOT see the clients of DOMAIN_A listed.
The Trusts running between the Domain Controllers in DOMAIN_A and DOMAIN_B makes it so that users from EITHER domain can log into workstations in EITHER domain, but you would have to change the Domain drop down to the appropriate domain. So, user BOB belongs to DOMAIN_A. BOB goes to a machine that is a member of DOMAIN_B. Due to the Trust between the 2 domains, BOB can sit down and log in as BOB, but he must choose DOMAIN_A from the drop-down. If he left it at DOMAIN_B, he would not be able to log in (because BOB does not exist on DOMAIN_B).

hope this clears things up

This discussion is closed to new replies.