Your workgroup servers can be targets of links. No problem. You can also
'point' to UNIX/LINUX (SAMBA) and NetWare resources - anything that can
be referred to with a UNC (\\server\share) can be a link in DFS...
definitely doesn't have to be a domain member.

HOWEVER
You cannot have a workgroup server host a ROOT TARGET, i.e. the DFS
"Server" itself needs to be a server in the domain - and in a
distributed env like CHW you'll be best served by hosting the root
targets on MEMBER SERVERS in the domain where the DFS root is, rather
than on DCs.  There are administrative and delegation issues that make
hosting a root target on a DC in a distributed, decentralized enterprise
a very bad idea.

ALSO
Replication will be challenging, but not just b/c you're in a multiple
domain environment.  The real issue is that FRS sucks, particularly if
you have a situation where changes will be made to multiple copies of a
replica.  

In other words, if you have FOLDER A replicated to SERVER1 and SERVER2,
and people are making changes to FOLDER A on both servers, FRS tends to
have issues.  Many of these will be solved in Windows 2003 R2, with it's
new replication technology.

Until then, my general guidance to clients is
1)      Use FRS only where there is a 'master - replica' topology, where
changes are made only to one server and replicated to all copies.  This
can be 'managed' by setting share permissions (NOT NTFS permissions,
which are replicated) on the "master" to allow modify/full and share
permissions on the replicas to allow only read. Don't use FRS across
servers in different domains/workgroups.

2)      Use another tool for replication in all other scenarios.
RoboCopy and DoubleTake are popular among my clients.

THIS DOCUMENT IS AWESOME:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/T
echRef/20ffb860-f802-455c-9ca2-5194f79a9eb4.mspx

Dan Holme
Director of Training & Consulting
Intelliem, Inc.


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Salandra,
Justin A.
Sent: Friday, June 03, 2005 7:32 AM
To: [email protected]
Subject: [ActiveDir] DFS

Can a DFS Root be created in a Root Domain and contain servers from
child domains in the DFS Share?  Is there any good information on how to
deal with permissions with this kind of setup?

Justin A. Salandra
MCSE Windows 2000 & 2003
Network and Technology Services Manager
Catholic Healthcare System
212.752.7300 - office
917.455.0110 - cell
[EMAIL PROTECTED]


List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to