Re: Domains & Authentication

From: JT (anonymous_at_discussions.microsoft.com)
Date: 06/27/04 

Date: Sun, 27 Jun 2004 07:34:19 -0700

thx for your reply. I was contemplating on whether to
join an existing domain only because I was concerned if
something happened to the PDC, then how would everyone
authenticate?

Is setting up a trust between the two ok, or would it be
best to just start all over again and do it the right
way?
>-----Original Message-----
>JT,
>
>I am not sure what you are trying to do here. Is there
a reason that the
>Terminal Server is in a separate domain? Did it ( the
separate domain )
>exist prior to you creating the current domain, or did
you put it in a
>separate domain? If the TS is in a separate domain, is
the server on which
>you are running TS the Domain Controller - or one of
them - in that separate
>domain?
>
>Here is how you would normally do things:
>
>
>1) You have your Domain Controller....this is where
all of your user
>account objects and computer account objects reside
>2) You install WIN2000 on a member server and then
install Terminal
>Server in Application Mode ( remember that there are two
modes:
> Remote Administration and Application Mode )
>3) You might want to consider looking at the
following MSKB Article for a
>guide on how to lock down the TS:
>
>http://support.microsoft.com/?id=278295
>
>
>Since your TS is in a different domain from your desired
user base you might
>want to consider setting up a trust between the two
domains...
>
>HTH,
>
>Cary
>
>
>
>
>"JT" <pvtpilot@dtnspeed.ent> wrote in message
>news:21d2b01c45c4d$9c2c4280$a301280a@phx.gbl...
>> I have a new W2K Server which will be used as a TS. I
>> have another W2K that is the main server. What's the
>> best way to have the TS setup when logging onto
domains?
>>
>> The new TS is its separate domain. All the user's
>> already exist on the older domain, so is there a way to
>> automatically join the older domain upon login for
>> authentication, rather than being prompted to logon
>> twice....one to the TS and then again to the older
domain
>> W2K server?
>
>
>.
>

Relevant Pages

  • Re: Somehow created subdomain of SBS domain
    ... I'll probably just get rid of the subdomain, ... > You may still need to describe your reasons for creating a separate Domain ... > though, sometimes a company might do that to isolate security configurations, ... Some machines may have to uninstall, maybe disable Server applications. ...
    (microsoft.public.windows.server.sbs)
  • Re: Domains & Authentication
    ... Terminal Server is in a separate domain? ... account objects and computer account objects reside ...
    (microsoft.public.win2000.active_directory)
  • Re: Questions about Multiple SBS Domains and users
    ... Or put dual NICs in the clients, have them physically connected to both networks, and have them use explicit credentials on the secondary network So, to connect to the second SBS network, they would do: ... And as Charlie said..is it just a case of wanting a separate domain for email. ... Cris Hanna [SBS - MVP] ... But if you need to keep them in entirely separate domains, then you're either going to have to move to a full Server 2k3 environment, with two Server 2k3 boxes, no SBS at all to have employees who have accounts with access to both domains. ...
    (microsoft.public.windows.server.sbs)
  • Re: One-way inbound trusts
    ... hosted on a server over which I have no control. ... a separate domain, ... Will a one-way inbound trust allow any authorized in existingdomain access ...
    (microsoft.public.windows.server.security)
  • Re: SBS configured not using wizards
    ... chances of needing the second server for comfort reasons will subside;-). ... SBS is solid. ... when creating user account objects. ... That (moving the user account objects to the 'proper' location) ...
    (microsoft.public.windows.server.sbs)