Complicated AD Trust

[striderida1]

Ok i’ll try to make this short as possible 😛

Our current Windows PDC has had it’s NTFRS layer become corrupt so there is no way to create any SDC’s. Our only hope at this point is to create a new PDC and give it a different domain name. For example ABC.net and ABC.org. We want to gradually move all our 1500 mac clients over to the new DC (ABC.org) on a gradual basis away from ABC.net. It would seem the best idea would be to have the mac clients bound to both Domains in theory so it has the option to authenticate to either domain. Then over time once all clients have been bound to the new PDC (ABC.org)….Take ABC.net out of the trust relationship and have the one domain in place (ABC.org). This is not a forest configuration as it is only a trust between 2 domains in the same geographical location. Simplifying my question, is there a way to join a mac client to 2 diffrent domains for authentication into an AD/OD environment without having a forest in place? Any insight would help greatly. Thanks.

[Author]

Posts