Re: Child Domain Authentication

A dc will only authenticate logon requests for its domain, since it only has
information about its dc. It will use pass-through authentication to assist
in the logon of the remote client.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"MJC" <mjcartier@xxxxxxxxxxxxx> wrote in message
news:epJISbPvHHA.3356@xxxxxxxxxxxxxxxxxxxxxxx
Feel like I should know this answer but want to be sure. Here is our
scenerio, we have a new office we're building out. Office will house some
users from our child domain and some users from our root domain.

We have funding for only one DC....there are more child domain users than
root...Can I put a DC for the root domain and it would be able to
authenticate all clients? or will the child clients...go outsite its site
to locate a DC for its native domain.



.

Relevant Pages

  • Re: Kerberos Authentication
    ... installed on a single print server that is a member of the parent domain, ... then printing will fail because no DC will be available to authenticate ... when the WAN link to ... a user in the child domain ...
    (microsoft.public.win2000.active_directory)
  • Re: Kerberos Authentication
    ... so you don't have DCs for the child domain in the site when your users ... You need a DC to authenticate. ... all local printers are set on a Print Server ... >>> local domain should work indipendently, ...
    (microsoft.public.win2000.active_directory)
  • Re: Radius with child domain
    ... Thank you for your explainations:) Actually I tried to authenticate my ... Enterprise CA and register IAS on both parent and child domain AD. ... This means that when you install an IAS server, ...
    (microsoft.public.internet.radius)
  • RE: AD Design
    ... | Content-Type: text/plain; ... | I am running Windows 2000 Server and Exchange 2000 at my site. ... company called yy.com is joining us and want to be like a child domain to ... | Is it possible for users from yy.com to authenticate using xx.com Windows ...
    (microsoft.public.win2000.advanced_server)
  • Re: How to move parent domain users to child domain users.
    ... its users will authenticate through the child domain DC?.. ... If they're members of that child domain, ... One reason is to free up ... some bandwidth of the VPN connection. ...
    (microsoft.public.windows.server.active_directory)
Loading