synchronising domains

Hi,

I have two domains, A and B, both with Windows 2003 server.
Domain A contains several accounts which I want to sync to the other domain B.

Is that possible?

I believe so it was in NT 3.51 (..), simple by trused and trusting domains?

Thanks in advance.

John

"John" <> wrote in message news:ECCD8345-71D4-461C-8F3D-...
> Hi,
>
> I have two domains, A and B, both with Windows 2003 server.
> Domain A contains several accounts which I want to sync to the other domain B.
>
> Is that possible?
>
> I believe so it was in NT 3.51 (..), simple by trused and trusting domains?
>
> Thanks in advance.
>
> John
>


You can create trusts (domain or forest based) in Windows 2003 server as well, just like NT4, but there is really no way to 'sync' accounts other than exporting and creating contacts from one domain and importing them into the other.

So maybe I don't understand what you mean by 'syncing' accounts. Is it for Exchange? Contacts? etc... Maybe you can elaborate a bit more to better understand what you mean.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.

You can't sync domains. You can sync attributes between the domains, but
you haven't really defined what you are attempting to do.

My guess is if you established a two way trust then you could allow user to
use the credentials from their home forest log on and gain access to objects
in the trusting forest.

Please elaborate on what you are attempting to accomplish.

--
Paul Bergson
MVP - Directory Services
MCITP - Enterprise Administrator
MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
2008, Vista, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewGroups. This
posting is provided "AS IS" with no warranties and confers no rights.
"John" <> wrote in message
news:ECCD8345-71D4-461C-8F3D-...
> Hi,
>
> I have two domains, A and B, both with Windows 2003 server.
> Domain A contains several accounts which I want to sync to the other
domain B.
>
> Is that possible?
>
> I believe so it was in NT 3.51 (..), simple by trused and trusting
domains?
>
> Thanks in advance.
>
> John
>

"Paul Bergson [MVP-DS]" wrote:

> You can't sync domains. You can sync attributes between the domains, but
> you haven't really defined what you are attempting to do.
>
> My guess is if you established a two way trust then you could allow user to
> use the credentials from their home forest log on and gain access to objects
> in the trusting forest.
>
> Please elaborate on what you are attempting to accomplish.
>
> --
> Paul Bergson
> MVP - Directory Services
> MCITP - Enterprise Administrator
> MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
> 2008, Vista, 2003, 2000 (Early Achiever), NT4
> Microsoft's Thrive IT Pro of the Month - June 2009
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewGroups. This
> posting is provided "AS IS" with no warranties and confers no rights.
> "John" <> wrote in message
> news:ECCD8345-71D4-461C-8F3D-...
> > Hi,
> >
> > I have two domains, A and B, both with Windows 2003 server.
> > Domain A contains several accounts which I want to sync to the other
> domain B.
> >
> > Is that possible?
> >
> > I believe so it was in NT 3.51 (..), simple by trused and trusting
> domains?
> >
> > Thanks in advance.
> >
> > John
> >
>
>
> .
>
Thank all for your comment.

I just want to copy or move the accounts from domain A to B.
Why? the name of A should be changed, or is it possible to change the domain
name?

"John" <> wrote in message news:F0FF463B-15B3-47F6-99EE-...
>
>
> "Paul Bergson [MVP-DS]" wrote:
>
>> You can't sync domains. You can sync attributes between the domains, but
>> you haven't really defined what you are attempting to do.
>>
>> My guess is if you established a two way trust then you could allow user to
>> use the credentials from their home forest log on and gain access to objects
>> in the trusting forest.
>>
>> Please elaborate on what you are attempting to accomplish.
>>
>> --
>> Paul Bergson
>> MVP - Directory Services
>> MCITP - Enterprise Administrator
>> MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
>> 2008, Vista, 2003, 2000 (Early Achiever), NT4
>> Microsoft's Thrive IT Pro of the Month - June 2009
>>
>> http://www.pbbergs.com
>>
>> Please no e-mails, any questions should be posted in the NewGroups. This
>> posting is provided "AS IS" with no warranties and confers no rights.
>> "John" <> wrote in message
>> news:ECCD8345-71D4-461C-8F3D-...
>> > Hi,
>> >
>> > I have two domains, A and B, both with Windows 2003 server.
>> > Domain A contains several accounts which I want to sync to the other
>> domain B.
>> >
>> > Is that possible?
>> >
>> > I believe so it was in NT 3.51 (..), simple by trused and trusting
>> domains?
>> >
>> > Thanks in advance.
>> >
>> > John
>> >
>>
>>
>> .
>>
> Thank all for your comment.
>
> I just want to copy or move the accounts from domain A to B.
> Why? the name of A should be changed, or is it possible to change the domain
> name?
>
>


You mean you want to migrate DomainA to a new domain in a new forest called DomainB, or to another domain in the same forest (child)?

Ace

"Ace Fekay [MVP-DS, MCT]" wrote:

> "John" <> wrote in message news:F0FF463B-15B3-47F6-99EE-...
> >
> >
> > "Paul Bergson [MVP-DS]" wrote:
> >
> >> You can't sync domains. You can sync attributes between the domains, but
> >> you haven't really defined what you are attempting to do.
> >>
> >> My guess is if you established a two way trust then you could allow user to
> >> use the credentials from their home forest log on and gain access to objects
> >> in the trusting forest.
> >>
> >> Please elaborate on what you are attempting to accomplish.
> >>
> >> --
> >> Paul Bergson
> >> MVP - Directory Services
> >> MCITP - Enterprise Administrator
> >> MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
> >> 2008, Vista, 2003, 2000 (Early Achiever), NT4
> >> Microsoft's Thrive IT Pro of the Month - June 2009
> >>
> >> http://www.pbbergs.com
> >>
> >> Please no e-mails, any questions should be posted in the NewGroups. This
> >> posting is provided "AS IS" with no warranties and confers no rights.
> >> "John" <> wrote in message
> >> news:ECCD8345-71D4-461C-8F3D-...
> >> > Hi,
> >> >
> >> > I have two domains, A and B, both with Windows 2003 server.
> >> > Domain A contains several accounts which I want to sync to the other
> >> domain B.
> >> >
> >> > Is that possible?
> >> >
> >> > I believe so it was in NT 3.51 (..), simple by trused and trusting
> >> domains?
> >> >
> >> > Thanks in advance.
> >> >
> >> > John
> >> >
> >>
> >>
> >> .
> >>
> > Thank all for your comment.
> >
> > I just want to copy or move the accounts from domain A to B.
> > Why? the name of A should be changed, or is it possible to change the domain
> > name?
> >
> >
>
>
> You mean you want to migrate DomainA to a new domain in a new forest called DomainB, or to another domain in the same forest (child)?
>
> Ace
> .
>
I want to migrate to a new forest called domain B.

You will need to establish a trust between the two and migrate the objects.
I have an article on NT4 to Active directory migration at:
http://www.pbbergs.com/windows/articles.htm

After the trust you will need to use the freeware tool from Microsoft called
Active Directory Migration Toolkit (ADMT) v3 and then migrate the users
across.

Establish DNS communications between the two forests.
http://searchwinit.techtarget.com/ex...,289625,sid1_g
ci1101656,00.html

Create a trust between the two forests
http://technet.microsoft.com/en-us/l.../cc780479.aspx

Download the ADMT Tool
http://www.microsoft.com/downloads/d...37B-533A-466D-
A8E8-AFF85AD3D212&displaylang=en

ADMT Migration Guide
http://www.microsoft.com/downloads/d...770-3bbb-4b9e-
a8bc-01e9f7ef7342&DisplayLang=en

Perform the Migration
http://www.petri.co.il/active_direct...2k_windows_200
3.htm

Webcast (The PPT is the only working piece for help now)
http://support.microsoft.com/?kbid=325393

--
Paul Bergson
MVP - Directory Services
MCITP - Enterprise Administrator
MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
2008, Vista, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewGroups. This
posting is provided "AS IS" with no warranties and confers no rights.
"John" <> wrote in message
news:59C18A1C-3F7B-4670-93AB-...
>
>
> "Ace Fekay [MVP-DS, MCT]" wrote:
>
> > "John" <> wrote in message
news:F0FF463B-15B3-47F6-99EE-...
> > >
> > >
> > > "Paul Bergson [MVP-DS]" wrote:
> > >
> > >> You can't sync domains. You can sync attributes between the domains,
but
> > >> you haven't really defined what you are attempting to do.
> > >>
> > >> My guess is if you established a two way trust then you could allow
user to
> > >> use the credentials from their home forest log on and gain access to
objects
> > >> in the trusting forest.
> > >>
> > >> Please elaborate on what you are attempting to accomplish.
> > >>
> > >> --
> > >> Paul Bergson
> > >> MVP - Directory Services
> > >> MCITP - Enterprise Administrator
> > >> MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
> > >> 2008, Vista, 2003, 2000 (Early Achiever), NT4
> > >> Microsoft's Thrive IT Pro of the Month - June 2009
> > >>
> > >> http://www.pbbergs.com
> > >>
> > >> Please no e-mails, any questions should be posted in the NewGroups.
This
> > >> posting is provided "AS IS" with no warranties and confers no rights.
> > >> "John" <> wrote in message
> > >> news:ECCD8345-71D4-461C-8F3D-...
> > >> > Hi,
> > >> >
> > >> > I have two domains, A and B, both with Windows 2003 server.
> > >> > Domain A contains several accounts which I want to sync to the
other
> > >> domain B.
> > >> >
> > >> > Is that possible?
> > >> >
> > >> > I believe so it was in NT 3.51 (..), simple by trused and trusting
> > >> domains?
> > >> >
> > >> > Thanks in advance.
> > >> >
> > >> > John
> > >> >
> > >>
> > >>
> > >> .
> > >>
> > > Thank all for your comment.
> > >
> > > I just want to copy or move the accounts from domain A to B.
> > > Why? the name of A should be changed, or is it possible to change the
domain
> > > name?
> > >
> > >
> >
> >
> > You mean you want to migrate DomainA to a new domain in a new forest
called DomainB, or to another domain in the same forest (child)?
> >
> > Ace
> > .
> >
> I want to migrate to a new forest called domain B.
>

"John" <> wrote in message news:59C18A1C-3F7B-4670-93AB-...
>>
>>
>> You mean you want to migrate DomainA to a new domain in a new forest called DomainB, or to another domain in the same forest (child)?
>>
>> Ace
>> .
>>
> I want to migrate to a new forest called domain B.
>

Ahh, why didn't you say so? That's not synchronizing, that's definitely a migration. Paul and Santhosh gave you some good info on how to do it.

Ace