Re: New Domain

Neither, I misunderstood. You have disjoint name space in the same forest.
So you could just setup secondaries of each other, but I would just use the
same dns server within your primary dns server in your original domain and
replicate all DC's in your forest to replicate all dns info to all dc's, so
the dns servers would cover the zones of both name spaces. Once the new
domain is online bring up the new dns server on the new dc making sure they
are all AD integrated. You should also make sure that the Infrastruture
Master is not a GC in your original domain. Remember to point your new
clients to the new dns server within the new domain.

http://technet2.microsoft.com/WindowsServer/en/library/6c0515cf-1719-4bf4-a3c0-7e3514cef6581033.mspx?mfr=true

See ForestWide AD Integrated Zones
http://www.windowsitpro.com/Windows/Articles/ArticleID/40049/pg/2/2.html


--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"romulus" <romulus@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B93E71FC-E976-4D9E-A25E-F7EBAB33DA20@xxxxxxxxxxxxxxxx
Paul:

Before I start to perform the delegation, which DNS will be considered the
child DNS? I called the first domain in the forest olddomain and the new
domain tree in the forest the newdomain - This new DC also was setup with
DNS
during the DCPROMO.

Regards

"Paul Bergson" wrote:

Did you delegate your child dns namespace to this new dns server?
Otherwise
the parent isn't going to know how to find the child domain.

http://support.microsoft.com/default.aspx?scid=kb;en-us;255248&sd=RMVP



--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no
rights.

"romulus" <romulus@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A5D3AAA1-0645-460A-AC9A-0DEE43CAEB1F@xxxxxxxxxxxxxxxx
Hey everyone:

My company has aquired several other companies and we have decided to
start
a new domain. All New client rollouts and member servers will be part
of
this new domain. We will gradually migrate users and systems over to
the
new
domain.

We need to be able to utilize the resources (e.g. shares ) between the
two
domains. One way of accessing the resources will be using UNCs. Based
on
my
understanding using the dcpromo wizard and New domain tree in an
existing
forest should do the trick - creating the necessary trust
automatically.

For some reason, things are never quite that simple, Here is the
problem -
I ran the wizard on a test environment and selected the option to
create a
new dns. Once the wizard completed, I could access resources between
domains
through the network neighborhood. I am not able to access the
resources
using the unc such as \\server\share or \\10.1.1.143\share. I know I
can
map
a drive, but there may be instances where I would need use the UNC. Is
there
any reason why this is happening.

Also in the test invironment, I tried to demote the new domain and
remove
it
from AD through DCPromo, just as a test and I receive the following
error:

The operation failed bcause:

Active Directory could not transfer the remaining data in directory
partition CN=Schema,CN=Configuration,DC=OLDDC,DC=org to domain
controller
dc1.olddomain.org.

"The DSA operation is unable to proceed because of a DNS lookup
failure."


Thanks for any help or gudance that can be provded.

regards





.

Relevant Pages

  • Re: Universal Group Membership Caching - DNS?
    ... Try to avoid excessive replication of other Large zones/domains ... Stub or conditional fowarding from the local DNS can avoid having ... least one working DNS server as things change but this might not ... need forest wide Browsing etc to work. ...
    (microsoft.public.windows.server.active_directory)
  • Re: New Domain
    ... Paul I will try your suggestions and let you know how it goes. ... DC again for the new domain tree under the existing forest. ... "The DSA operation is unable to proceed because of a DNS lookup ... same dns server within your primary dns server in your original ...
    (microsoft.public.windows.server.active_directory)
  • Re: Protected Forest with One Child domain
    ... The forest is in native mode. ... so your child DNS servers can resolve both their ... INTERNAL zone on every DNS server using AD-Integrated Forest ...
    (microsoft.public.windows.server.dns)
  • Re: New Domain
    ... DC again for the new domain tree under the existing forest. ... browse via unc with no problem - Paul thanks. ... "The DSA operation is unable to proceed because of a DNS lookup ... same dns server within your primary dns server in your original domain ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD 2003 Design from NT 4
    ... The forest contains the empty root domain called ad.local and the domain ... I started with a standalone DNS server Windows 2003. ... > completely separate forest, ...
    (microsoft.public.windows.server.dns)