Updates are possible. Former maintainer Nick Howitt is making them available for a small charge. This includes a fix to the Windows Networking (Samba) Trust Relationship issue. It looks like he can be contacted via https://www.howitts.co.uk/clearosupdates.html.

Charles Sicher wrote:

William P LaBarre wrote:

I am replacing a dead WS2008 box (which was active PDC when died) with COS.

Don't DO IT, you will regret it! Take it from someone who's been using this product a long time.

The long answer can be found here

https://www.clearos.com/clearfoundation/social/community/w11-domain-trust-relationship-failed

Luckily, I almost made the wrong decisions bob the robber

Regarding what constitutes optimal practice, I have no idea. Is it not obvious to you that the ClearOS Domain type represents the defunct NT4 domain type? It is not Active Directory. Using Outlook or login scripts now requires modifying the registry, however the feature is functional. This is because Microsoft is gradually removing functions from Windows 10. Joining a ClearOS domain also requires modifying the registry. basketball stars

William P LaBarre wrote:

I am replacing a dead WS2008 box (which was active PDC when died) with COS.

Don't DO IT, you will regret it! Take it from someone who's been using this product a long time.

The long answer can be found here

https://www.clearos.com/clearfoundation/social/community/w11-domain-trust-relationship-failed

I can't comment on best practice. Are you aware that the ClearOS Domain type is the old NT4 domain type? It is not Active Directory. It does work but M$ are slowly withdrawing features from Win10 so you now need to do registry changes if you want to use Outlook or use logon scripts. You also need to do a couple of registry changes to join a ClearOS domain. More details are in this KB article.