Re: Domains & Authentication

From: Cary Shultz [A.D. MVP] (cwshultz_at_mvps.org)
Date: 06/27/04 

Date: Sun, 27 Jun 2004 10:07:16 -0400

JT,

I am not sure what you are trying to do here. Is there a reason that the
Terminal Server is in a separate domain? Did it ( the separate domain )
exist prior to you creating the current domain, or did you put it in a
separate domain? If the TS is in a separate domain, is the server on which
you are running TS the Domain Controller - or one of them - in that separate
domain?

Here is how you would normally do things:

1) You have your Domain Controller....this is where all of your user
account objects and computer account objects reside
2) You install WIN2000 on a member server and then install Terminal
Server in Application Mode ( remember that there are two modes:
        Remote Administration and Application Mode )
3) You might want to consider looking at the following MSKB Article for a
guide on how to lock down the TS:

http://support.microsoft.com/?id=278295

Since your TS is in a different domain from your desired user base you might
want to consider setting up a trust between the two domains...

HTH,

Cary

"JT" <pvtpilot@dtnspeed.ent> wrote in message
news:21d2b01c45c4d$9c2c4280$a301280a@phx.gbl...
> I have a new W2K Server which will be used as a TS. I
> have another W2K that is the main server. What's the
> best way to have the TS setup when logging onto domains?
>
> The new TS is its separate domain. All the user's
> already exist on the older domain, so is there a way to
> automatically join the older domain upon login for
> authentication, rather than being prompted to logon
> twice....one to the TS and then again to the older domain
> W2K server?

Relevant Pages

  • Re: Somehow created subdomain of SBS domain
    ... I'll probably just get rid of the subdomain, ... > You may still need to describe your reasons for creating a separate Domain ... > though, sometimes a company might do that to isolate security configurations, ... Some machines may have to uninstall, maybe disable Server applications. ...
    (microsoft.public.windows.server.sbs)
  • Re: Domains & Authentication
    ... >Terminal Server is in a separate domain? ... >account objects and computer account objects reside ... user base you might ...
    (microsoft.public.win2000.active_directory)
  • Re: Questions about Multiple SBS Domains and users
    ... Or put dual NICs in the clients, have them physically connected to both networks, and have them use explicit credentials on the secondary network So, to connect to the second SBS network, they would do: ... And as Charlie said..is it just a case of wanting a separate domain for email. ... Cris Hanna [SBS - MVP] ... But if you need to keep them in entirely separate domains, then you're either going to have to move to a full Server 2k3 environment, with two Server 2k3 boxes, no SBS at all to have employees who have accounts with access to both domains. ...
    (microsoft.public.windows.server.sbs)
  • Re: One-way inbound trusts
    ... hosted on a server over which I have no control. ... a separate domain, ... Will a one-way inbound trust allow any authorized in existingdomain access ...
    (microsoft.public.windows.server.security)
  • Re: SBS configured not using wizards
    ... chances of needing the second server for comfort reasons will subside;-). ... SBS is solid. ... when creating user account objects. ... That (moving the user account objects to the 'proper' location) ...
    (microsoft.public.windows.server.sbs)