RE: LMHOSTS question
- From: v-jasont@xxxxxxxxxxxxxxxxxxxx (Jason Tan (MSFT))
- Date: Wed, 15 Jun 2005 08:37:42 GMT
Hi Kevin,
Thanks for posting!
Based on the description, I understand that there are no trust relationship
established between the two Windows 2k3 domains.
Therefore, you cannot logon either of the two Windows 2k3 domain after the
NT domain has been demoted.
Since the NT domain has trust relationship with the two Windows 2k3 domains
respectively, the clients joined to the NT domain can logon to any of the
three domains. However, when the previous NT domain does not exist, if you
want to logon the two Windows 2k3 domain, the trust relationship must be
established between the two Windows 2k3 domains and you require to join the
clients into either of the Windows 2k3 domain.
Thanks & Regards,
Jason Tan
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Kevin" <noemailhere@xxxxxxxxx>
| Subject: LMHOSTS question
| Date: Wed, 15 Jun 2005 00:41:05 -0400
| Lines: 35
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1437
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
| Message-ID: <uEKNyRWcFHA.1384@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.migration
| NNTP-Posting-Host: mail.mmllp.com 209.217.122.67
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.migration:10661
| X-Tomcat-NG: microsoft.public.windows.server.migration
|
| I have performed a migration from a single NT domain to multiple 2003 AD
| forests (as part of a split up of the company). I have the following
domain
| structure:
|
| NTDOM is the source NT4 domain for the migration and it has two way trusts
| to both W2K3DOM1 and W2K3DOM2.
| W2K3DOM1 is a new Win2k3 AD Domain (as forest root) and in no way trusts
| W2KDOM2.
| W2K3DOM2 is a new Win2k3 AD Domain (as forest root) and in no way trusts
| W2KDOM1.
|
| I have two computers that are still members of NTDOM because they are
shared
| by a few users from each of the new AD domains. A user from either AD
| domain can pick from the list of trusted domains (the drop down in the
login
| dialog box has all 3 domains) and everything works fine to this point.
|
| This has been running and working nicely for 6+ months.
|
| What I want to do is decommission the NTDOM but retain the ability for the
| users to log onto either of the AD domains from these computers without
| having to join the computer to one of the new domains. I have tried using
| the LMHOSTS and listing the domains, AD DCs, and proper IP addresses and
| when I do a nbtstat -c it seems that everything is registered properly.
| However, the logon scripts do not run and when I test a user that has no
| previously cached credentials I get an error that the domain cannot be
| found.
|
| Is it possible to do what I am trying to do? If so, what am I missing?
Is
| there a better way?
|
| Thanks
|
| Kevin
|
|
|
.
- References:
- LMHOSTS question
- From: Kevin
- LMHOSTS question
- Prev by Date: Re: Question for MSFT
- Next by Date: RE: PC Netlink
- Previous by thread: LMHOSTS question
- Index(es):
Relevant Pages
|
Loading