Re: New Domain

Paul:

Before I start to perform the delegation, which DNS will be considered the
child DNS? I called the first domain in the forest olddomain and the new
domain tree in the forest the newdomain - This new DC also was setup with DNS
during the DCPROMO.

Regards

"Paul Bergson" wrote:

Did you delegate your child dns namespace to this new dns server? Otherwise
the parent isn't going to know how to find the child domain.

http://support.microsoft.com/default.aspx?scid=kb;en-us;255248&sd=RMVP



--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"romulus" <romulus@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A5D3AAA1-0645-460A-AC9A-0DEE43CAEB1F@xxxxxxxxxxxxxxxx
Hey everyone:

My company has aquired several other companies and we have decided to
start
a new domain. All New client rollouts and member servers will be part of
this new domain. We will gradually migrate users and systems over to the
new
domain.

We need to be able to utilize the resources (e.g. shares ) between the
two
domains. One way of accessing the resources will be using UNCs. Based on
my
understanding using the dcpromo wizard and New domain tree in an existing
forest should do the trick - creating the necessary trust automatically.

For some reason, things are never quite that simple, Here is the problem -
I ran the wizard on a test environment and selected the option to create a
new dns. Once the wizard completed, I could access resources between
domains
through the network neighborhood. I am not able to access the resources
using the unc such as \\server\share or \\10.1.1.143\share. I know I can
map
a drive, but there may be instances where I would need use the UNC. Is
there
any reason why this is happening.

Also in the test invironment, I tried to demote the new domain and remove
it
from AD through DCPromo, just as a test and I receive the following error:

The operation failed bcause:

Active Directory could not transfer the remaining data in directory
partition CN=Schema,CN=Configuration,DC=OLDDC,DC=org to domain controller
dc1.olddomain.org.

"The DSA operation is unable to proceed because of a DNS lookup failure."


Thanks for any help or gudance that can be provded.

regards



.

Relevant Pages

  • Re: Protected Forest with One Child domain
    ... The forest is in native mode. ... so your child DNS servers can resolve both their ... INTERNAL zone on every DNS server using AD-Integrated Forest ...
    (microsoft.public.windows.server.dns)
  • Re: New Domain
    ... You have disjoint name space in the same forest. ... same dns server within your primary dns server in your original domain and ... One way of accessing the resources will be using UNCs. ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD 2003 Design from NT 4
    ... The forest contains the empty root domain called ad.local and the domain ... I started with a standalone DNS server Windows 2003. ... > completely separate forest, ...
    (microsoft.public.windows.server.dns)
  • Re: Protected Forest with One Child domain
    ... All servers are Win2K3. ... The forest is in native mode. ... I have setup my child domains to conditionally forward to the forest domain ... I can click on the root of the forest (in dns) and then ...
    (microsoft.public.windows.server.dns)
  • Re: Protected Forest with One Child domain
    ... I am setting up a new forest and a child domain. ... Dynamic DNS ZONE to support that domain. ... A DNS server is either a Primary or a Secondary. ...
    (microsoft.public.windows.server.dns)