Jonathan 2006-07-13 12:46:35
I have three domains. Production, Staging, and Development. IS there a tool
that I can use so I can replicate my users along with all their attributes to
each domain. That is to say, I have user xyz in production. User needs an
account in dev and stage. I want to replicate all user settings without
having to set the user up manually. This way user xyz will be setup, the user
id and password etc…. will be the same. This replication can be done
either on a schedule or manually if needed.
Paul bergson 2006-07-13 12:46:38
Are these three domains all within the same forest? If so then you
shouldn’t have to set up any type of replication. If they are seperate
forests then setup a trust and use either domain local or universal groups
(Depending on what you need) to establish access.
What exactly are you trying to accomplish?
Paul Bergson MCT, MCSE, MCSA, Security+, CNE, CNA, CCA
Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided “AS IS” with no warranties, and confers no rights.
Mario manzano 2006-07-13 12:46:46
There are a few ways to go. But it all depends on the version of windows you
have. You might be able to use the “Domain Trust” feature and just make your
domains trust eachother. That way if a user exists in one domain which is
trusted by another domain you should be good to go. However, if you are
looking on less hassle and management and you have 2003 server, you might be
better off creating a “Forest” for all your domains so they can co-exist
under the same “roof”
The dirty and fast way can be easy at first (Domain Trust), but this might
prove not that seamless with time.
My recomendation is to take a deep breath, put some time on planning and
then deploy. A good book to read is “Windows Server 2003 Unleashed” this can
give you a good look at AD and your options.
Jonathan 2006-07-13 12:46:48
Thank you for your quick reply. We are using Windows 2003. To clarify, I
would like to have the user actually exist on each domain as if they were
seperate entities… Not just have the ability to access each one. I just do
not want to have to manually create them on all 3.
Thank you again…
Joe richards m 2006-07-13 12:46:52
You can look at metadirectory products like IIFP/MIIS.
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O’Reilly Active Directory Third Edition
—O’Reilly Active Directory Third Edition now available—
Jonathan 2006-07-13 12:46:57
Thank you. I will look into these products.