SBS 2003

Hi Folks:

I am adding a new SBS to an existing Win2k3 domain with 2 AD servers sharing
all network roles, really like having 2 PDC's. During the addiyion of the
new SBS server to the domain i am realizing that the SBS server must be the
ONLY:

Global Catalog
FSMO
PDC Emulator
Operations Master in numerous places....
Licensing..
And on and on.

After this is all completed, will my entire domain be relying on a single
PDC, and if the SBS server goes down are we down?

Ultimately all I want is to use exchange with 7 users. Should i just put
the SBS server on its own domain and setup a trust so i can use it for more
than just exchange? I don't mind if we have to configure e-mail user names
and passwords separately, only 7 users...

Any help/advice would be great as i have pause this install.

Thanks,

Doug

PS - Yes, i realize we should be dealing with 2008 but 03 seems to work fine
for our small environment. We still have NT4 SP4 running - LOL

Yes, i realize that after reading some other forums.

"Cris Hanna [SBS - MVP]" wrote:

> You also can't establish trusts with SBS
>
>
> --
> Cris Hanna [SBS - MVP] (since 1997)
> Co-Contributor, Windows Small Business Server 2008 Unleashed
> http://www.amazon.com/Windows-Small-...7269967&sr=8-1
> Owner, CPU Services, Belleville, IL
> A Microsoft Registered Partner
> ------------------------------------
> MVPs do not work for Microsoft
> Please do not submit questions directly to me.
>
> "Douglas Ofner" <Douglas > wrote in message news:4401D0B9-BC64-479E-98DD-...
> Hi Folks:
>
> I am adding a new SBS to an existing Win2k3 domain with 2 AD servers sharing
> all network roles, really like having 2 PDC's. During the addiyion of the
> new SBS server to the domain i am realizing that the SBS server must be the
> ONLY:
>
> Global Catalog
> FSMO
> PDC Emulator
> Operations Master in numerous places....
> Licensing..
> And on and on.
>
> After this is all completed, will my entire domain be relying on a single
> PDC, and if the SBS server goes down are we down?
>
> Ultimately all I want is to use exchange with 7 users. Should i just put
> the SBS server on its own domain and setup a trust so i can use it for more
> than just exchange? I don't mind if we have to configure e-mail user names
> and passwords separately, only 7 users...
>
> Any help/advice would be great as i have pause this install.
>
> Thanks,
>
> Doug
>
> PS - Yes, i realize we should be dealing with 2008 but 03 seems to work fine
> for our small environment. We still have NT4 SP4 running - LOL

7 users and you want two PDCs?

Take this in the respectful small business manner in which it is given.
Leave the enterprise brain at the big business. You are in small
business now. Get over these PDCs ideas as they don't scale down here.

The DC doesn't go down when you buy good hardware ...and when it does we
have cached credentials.

I can have addition domain controllers if I want to but I'd rather spend
my money on an addition image based backup.

You are better served killing off that NT4 than worrying about two PDCs.

Douglas Ofner wrote:
> Yes, i realize that after reading some other forums.
>
> "Cris Hanna [SBS - MVP]" wrote:
>
>
>> You also can't establish trusts with SBS
>>
>>
>> --
>> Cris Hanna [SBS - MVP] (since 1997)
>> Co-Contributor, Windows Small Business Server 2008 Unleashed
>> http://www.amazon.com/Windows-Small-...7269967&sr=8-1
>> Owner, CPU Services, Belleville, IL
>> A Microsoft Registered Partner
>> ------------------------------------
>> MVPs do not work for Microsoft
>> Please do not submit questions directly to me.
>>
>> "Douglas Ofner" <Douglas > wrote in message news:4401D0B9-BC64-479E-98DD-...
>> Hi Folks:
>>
>> I am adding a new SBS to an existing Win2k3 domain with 2 AD servers sharing
>> all network roles, really like having 2 PDC's. During the addiyion of the
>> new SBS server to the domain i am realizing that the SBS server must be the
>> ONLY:
>>
>> Global Catalog
>> FSMO
>> PDC Emulator
>> Operations Master in numerous places....
>> Licensing..
>> And on and on.
>>
>> After this is all completed, will my entire domain be relying on a single
>> PDC, and if the SBS server goes down are we down?
>>
>> Ultimately all I want is to use exchange with 7 users. Should i just put
>> the SBS server on its own domain and setup a trust so i can use it for more
>> than just exchange? I don't mind if we have to configure e-mail user names
>> and passwords separately, only 7 users...
>>
>> Any help/advice would be great as i have pause this install.
>>
>> Thanks,
>>
>> Doug
>>
>> PS - Yes, i realize we should be dealing with 2008 but 03 seems to work fine
>> for our small environment. We still have NT4 SP4 running - LOL
>>

Just to reinforce, I have been supporting SBS since v 4.0 and have *never*
lost a server. Not even for a few hours. I have shut some down to replace
full or failing drives, but trust me, on quality hardware, it just works.

having said that, you can have additional DC's in an SBS domain, and there
can be a few valid reasons for doing so, such as branch offices. But if
you have a power failure or some such that blows up your SBS, your efforts
will be better spent in bringing it back that going through the excercizes
of making everything wonderful without it.

-Larry

-Please post the resolution to your issue so others may benefit.

-Get Your SBS Health Check at www.sbsbpa.com


> 7 users and you want two PDCs?
>
> Take this in the respectful small business manner in which it is
> given. Leave the enterprise brain at the big business. You are in
> small business now. Get over these PDCs ideas as they don't scale
> down here.
>
> The DC doesn't go down when you buy good hardware ...and when it does
> we have cached credentials.
>
> I can have addition domain controllers if I want to but I'd rather
> spend my money on an addition image based backup.
>
> You are better served killing off that NT4 than worrying about two
> PDCs.
>
> Douglas Ofner wrote:
>
>> Yes, i realize that after reading some other forums.
>>
>> "Cris Hanna [SBS - MVP]" wrote:
>>
>>> You also can't establish trusts with SBS
>>>
>>> --
>>>
>>> Cris Hanna [SBS - MVP] (since 1997)
>>>
>>> Co-Contributor, Windows Small Business Server 2008 Unleashed
>>>
>>> http://www.amazon.com/Windows-Small-...leashed/dp/067
>>> 2329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr= 8-1
>>>
>>> Owner, CPU Services, Belleville, IL
>>>
>>> A Microsoft Registered Partner
>>>
>>> ------------------------------------
>>>
>>> MVPs do not work for Microsoft
>>>
>>> Please do not submit questions directly to me.
>>>
>>> "Douglas Ofner" <Douglas > wrote in
>>> message news:4401D0B9-BC64-479E-98DD-...
>>>
>>> Hi Folks:
>>>
>>> I am adding a new SBS to an existing Win2k3 domain with 2 AD servers
>>> sharing all network roles, really like having 2 PDC's. During the
>>> addiyion of the new SBS server to the domain i am realizing that the
>>> SBS server must be the ONLY:
>>>
>>> Global Catalog
>>> FSMO
>>> PDC Emulator
>>> Operations Master in numerous places....
>>> Licensing..
>>> And on and on.
>>> After this is all completed, will my entire domain be relying on a
>>> single PDC, and if the SBS server goes down are we down?
>>>
>>> Ultimately all I want is to use exchange with 7 users. Should i
>>> just put the SBS server on its own domain and setup a trust so i can
>>> use it for more than just exchange? I don't mind if we have to
>>> configure e-mail user names and passwords separately, only 7
>>> users...
>>>
>>> Any help/advice would be great as i have pause this install.
>>>
>>> Thanks,
>>>
>>> Doug
>>>
>>> PS - Yes, i realize we should be dealing with 2008 but 03 seems to
>>> work fine for our small environment. We still have NT4 SP4 running
>>> - LOL
>>>

Thank you for your responses..

Our 7 users are all in-house support staff. We have 150 users that work
from their homes. We dont provide them with e-mail as they are subs. We
currently have 5 quality servers running in our shop. This will be the
sixth. My goal was to add exchange (SBS) so we could use web based outlook
in addition to a few other simple tasks i need done on the network.

The server is a dell Dual Xeon with hot swap raid5 data and raid 1 OS
drives. redundant power supplies.....the works..

The point is, i am worried about demoting our 2 servers and promoting this
one SBS to be the "Boss". I am concerned that if the primary goes down we
are SOL. If i proceed and setup the SBS, Is there a way to make my current
servers backup AD's? (BDC's)

I was following the instructions here: http://support.microsoft.com/kb/884453

And got to step 7 and stopped.

Thank for all your help, really appreciated.

Doug

In the 2k3/2k8 era they are just called additional domain controllers
not backup domain controllers.

Either you need to make the SBS the boss.....or... use pass through
authentication and have these 7 people log into one domain, and in the
other use pass through authentication. I've seen folks do this.

My advice is to talk to Jeff Middleton of sbsmigration.com

Douglas Ofner wrote:
> Thank you for your responses..
>
> Our 7 users are all in-house support staff. We have 150 users that work
> from their homes. We dont provide them with e-mail as they are subs. We
> currently have 5 quality servers running in our shop. This will be the
> sixth. My goal was to add exchange (SBS) so we could use web based outlook
> in addition to a few other simple tasks i need done on the network.
>
> The server is a dell Dual Xeon with hot swap raid5 data and raid 1 OS
> drives. redundant power supplies.....the works..
>
> The point is, i am worried about demoting our 2 servers and promoting this
> one SBS to be the "Boss". I am concerned that if the primary goes down we
> are SOL. If i proceed and setup the SBS, Is there a way to make my current
> servers backup AD's? (BDC's)
>
> I was following the instructions here: http://support.microsoft.com/kb/884453
>
> And got to step 7 and stopped.
>
> Thank for all your help, really appreciated.
>
> Doug
>

Hey,

Again, thanks for the replies.

No, these 150 are using a custom app so no worries for them with rdp or any
other remote access.

I have never heard of pass through authentication. Is there any recommended
reading for this?

Thanks again,

Doug

Addendum:

When you say additional domain controllers, that would suggest that even if
the "Boss" is down the user accounts would still be on the "additional domain
controllers", is that correct?

Doug

Hi Chris:

The custom app has a server side component that handles all the requests
from the client apps. None of it integrates with windows AD.

That server is dedicated to that application.

If that is true, and the other AD servers will be able to pickup user
authentication if the SBS server is down then i am fine with continuing the
setup.

Would you agree that is is ok?

Regards,

Doug

"Cris Hanna [SBS - MVP]" wrote:

> Does the custom app reside on the Servers in the office or does each user have the app on their PC at their remote location.
>
>

Hey Chris:

Im sorry, not sure what the LOB is...

Thanks,

Doug

"Cris Hanna [SBS - MVP]" wrote:

> If the LOB app resides on the SBS network and folks have to authenicate AD somehow to access the app i.e. security on the shared folder (which very well may it's own authenication too)...then SBS is a no go.
>
>