Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » AD Sites and Services Best Practices
AD Sites and Services Best Practices [message #160883] Thu, 10 September 2009 05:41 Go to next message
Luiz  is currently offline Luiz
Messages: 119
Registered: July 2009
Senior Member
Hi,

I am implementing a new Windows 2003 Active Directory environment and I
would like to know If anyone can help me about AD Sites and Services Best
Practices/Strategy:
- my environment is a Main Office with 3 Branch Offices and each Branch
Office will have a Domain Controller (Windows 2003).
I will create the subnets for each site (Main Office and Branch Office) so
each Domain Controller will stay in your site.
One question:
- In Branch Office Site, besides the local DC, should I put the Main Office
DC to get a better replication performance?
If I put the Main Office DC in Branch Office Site this will mean that the
Branch Office workstations will log on in the Main Office DC too, is that
right?
But in compensation the passwords will replicate quicker, ok?

If anyone has a tip I appreciate.

Thanks for while.

Luiz
Re: AD Sites and Services Best Practices [message #160884 is a reply to message #160883] Thu, 10 September 2009 05:57 Go to previous messageGo to next message
Marcin  is currently offline Marcin  United States
Messages: 273
Registered: July 2009
Senior Member
Luiz,
does this mean that you have four separate domains (each corresponding to
the physical location)? If so, placing a DC that is part of the "Main
Office" domain in branch offices will actually increase replication. Setting
up additional DCs from other domains in each site would primarily depend on
whether you have users from each office visit other locations on regular
basis (so they can be authenticated by a local DC - rather than having to
authenticate over WAN)

hth
Marcin

"Luiz" <Luiz@discussions.microsoft.com> wrote in message
news:377A9372-BAE7-43BC-91FA-8477CCE5E0CA@microsoft.com...
> Hi,
>
> I am implementing a new Windows 2003 Active Directory environment and I
> would like to know If anyone can help me about AD Sites and Services Best
> Practices/Strategy:
> - my environment is a Main Office with 3 Branch Offices and each Branch
> Office will have a Domain Controller (Windows 2003).
> I will create the subnets for each site (Main Office and Branch Office) so
> each Domain Controller will stay in your site.
> One question:
> - In Branch Office Site, besides the local DC, should I put the Main
> Office
> DC to get a better replication performance?
> If I put the Main Office DC in Branch Office Site this will mean that the
> Branch Office workstations will log on in the Main Office DC too, is that
> right?
> But in compensation the passwords will replicate quicker, ok?
>
> If anyone has a tip I appreciate.
>
> Thanks for while.
>
> Luiz
Re: AD Sites and Services Best Practices [message #160885 is a reply to message #160883] Thu, 10 September 2009 06:05 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Luiz,

In AD sites and services you have to reflect the physical structure with
the sites and there beloging subnets. So if the Main site use a different
subnet then the branches, what i assume, you have to keep the main site DC
in it's own site. You can lower the replciation between sites in AD sites
and services to 15 minutes or with some more configuration to more or less
immediate. But if you know where the user is located for password change,
just choose the correct site DC and change the password on this one.

See this one for lower more then 15 minutes, but keep in mind this creates
a lot of traffic:
http://www.frickelsoft.net/blog/?p=145

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi,
>
> I am implementing a new Windows 2003 Active Directory environment and
> I
> would like to know If anyone can help me about AD Sites and Services
> Best
> Practices/Strategy:
> - my environment is a Main Office with 3 Branch Offices and each
> Branch
> Office will have a Domain Controller (Windows 2003).
> I will create the subnets for each site (Main Office and Branch
> Office) so
> each Domain Controller will stay in your site.
> One question:
> - In Branch Office Site, besides the local DC, should I put the Main
> Office
> DC to get a better replication performance?
> If I put the Main Office DC in Branch Office Site this will mean that
> the
> Branch Office workstations will log on in the Main Office DC too, is
> that
> right?
> But in compensation the passwords will replicate quicker, ok?
> If anyone has a tip I appreciate.
>
> Thanks for while.
>
> Luiz
>
Re: AD Sites and Services Best Practices [message #160886 is a reply to message #160883] Thu, 10 September 2009 06:05 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Luiz,

Also see:
http://technet.microsoft.com/en-us/library/cc755768(WS.10).aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi,
>
> I am implementing a new Windows 2003 Active Directory environment and
> I
> would like to know If anyone can help me about AD Sites and Services
> Best
> Practices/Strategy:
> - my environment is a Main Office with 3 Branch Offices and each
> Branch
> Office will have a Domain Controller (Windows 2003).
> I will create the subnets for each site (Main Office and Branch
> Office) so
> each Domain Controller will stay in your site.
> One question:
> - In Branch Office Site, besides the local DC, should I put the Main
> Office
> DC to get a better replication performance?
> If I put the Main Office DC in Branch Office Site this will mean that
> the
> Branch Office workstations will log on in the Main Office DC too, is
> that
> right?
> But in compensation the passwords will replicate quicker, ok?
> If anyone has a tip I appreciate.
>
> Thanks for while.
>
> Luiz
>
Re: AD Sites and Services Best Practices [message #160888 is a reply to message #160883] Thu, 10 September 2009 06:26 Go to previous messageGo to next message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
Microsoft has a document specific to what your subject line states
http://technet.microsoft.com/en-us/library/cc755768(WS.10).aspx

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Luiz" <Luiz@discussions.microsoft.com> wrote in message
news:377A9372-BAE7-43BC-91FA-8477CCE5E0CA@microsoft.com...
> Hi,
>
> I am implementing a new Windows 2003 Active Directory environment and I
> would like to know If anyone can help me about AD Sites and Services Best
> Practices/Strategy:
> - my environment is a Main Office with 3 Branch Offices and each Branch
> Office will have a Domain Controller (Windows 2003).
> I will create the subnets for each site (Main Office and Branch Office) so
> each Domain Controller will stay in your site.
> One question:
> - In Branch Office Site, besides the local DC, should I put the Main
> Office
> DC to get a better replication performance?
> If I put the Main Office DC in Branch Office Site this will mean that the
> Branch Office workstations will log on in the Main Office DC too, is that
> right?
> But in compensation the passwords will replicate quicker, ok?
>
> If anyone has a tip I appreciate.
>
> Thanks for while.
>
> Luiz
Re: AD Sites and Services Best Practices [message #160892 is a reply to message #160884] Thu, 10 September 2009 07:52 Go to previous messageGo to next message
Luiz  is currently offline Luiz
Messages: 119
Registered: July 2009
Senior Member
Hi Marcin,

thanks for the response.
Yes, I do have separate domain controllers.
So, If I do not move the DC the default replication time is 15 minutes in a
hour, is that correct?

Thanks again.

Best Regards.

Luiz



"Marcin" wrote:

> Luiz,
> does this mean that you have four separate domains (each corresponding to
> the physical location)? If so, placing a DC that is part of the "Main
> Office" domain in branch offices will actually increase replication. Setting
> up additional DCs from other domains in each site would primarily depend on
> whether you have users from each office visit other locations on regular
> basis (so they can be authenticated by a local DC - rather than having to
> authenticate over WAN)
>
> hth
> Marcin
>
> "Luiz" <Luiz@discussions.microsoft.com> wrote in message
> news:377A9372-BAE7-43BC-91FA-8477CCE5E0CA@microsoft.com...
> > Hi,
> >
> > I am implementing a new Windows 2003 Active Directory environment and I
> > would like to know If anyone can help me about AD Sites and Services Best
> > Practices/Strategy:
> > - my environment is a Main Office with 3 Branch Offices and each Branch
> > Office will have a Domain Controller (Windows 2003).
> > I will create the subnets for each site (Main Office and Branch Office) so
> > each Domain Controller will stay in your site.
> > One question:
> > - In Branch Office Site, besides the local DC, should I put the Main
> > Office
> > DC to get a better replication performance?
> > If I put the Main Office DC in Branch Office Site this will mean that the
> > Branch Office workstations will log on in the Main Office DC too, is that
> > right?
> > But in compensation the passwords will replicate quicker, ok?
> >
> > If anyone has a tip I appreciate.
> >
> > Thanks for while.
> >
> > Luiz
>
>
>
Re: AD Sites and Services Best Practices [message #160893 is a reply to message #160892] Thu, 10 September 2009 07:54 Go to previous messageGo to next message
Marcin  is currently offline Marcin  United States
Messages: 273
Registered: July 2009
Senior Member
Luiz,
do you have separate domains?

Marcin

"Luiz" <Luiz@discussions.microsoft.com> wrote in message
news:7123078C-DB06-46D2-906D-8D516A49A328@microsoft.com...
> Hi Marcin,
>
> thanks for the response.
> Yes, I do have separate domain controllers.
> So, If I do not move the DC the default replication time is 15 minutes in
> a
> hour, is that correct?
>
> Thanks again.
>
> Best Regards.
>
> Luiz
>
>
>
> "Marcin" wrote:
>
>> Luiz,
>> does this mean that you have four separate domains (each corresponding to
>> the physical location)? If so, placing a DC that is part of the "Main
>> Office" domain in branch offices will actually increase replication.
>> Setting
>> up additional DCs from other domains in each site would primarily depend
>> on
>> whether you have users from each office visit other locations on regular
>> basis (so they can be authenticated by a local DC - rather than having to
>> authenticate over WAN)
>>
>> hth
>> Marcin
>>
>> "Luiz" <Luiz@discussions.microsoft.com> wrote in message
>> news:377A9372-BAE7-43BC-91FA-8477CCE5E0CA@microsoft.com...
>> > Hi,
>> >
>> > I am implementing a new Windows 2003 Active Directory environment and I
>> > would like to know If anyone can help me about AD Sites and Services
>> > Best
>> > Practices/Strategy:
>> > - my environment is a Main Office with 3 Branch Offices and each Branch
>> > Office will have a Domain Controller (Windows 2003).
>> > I will create the subnets for each site (Main Office and Branch Office)
>> > so
>> > each Domain Controller will stay in your site.
>> > One question:
>> > - In Branch Office Site, besides the local DC, should I put the Main
>> > Office
>> > DC to get a better replication performance?
>> > If I put the Main Office DC in Branch Office Site this will mean that
>> > the
>> > Branch Office workstations will log on in the Main Office DC too, is
>> > that
>> > right?
>> > But in compensation the passwords will replicate quicker, ok?
>> >
>> > If anyone has a tip I appreciate.
>> >
>> > Thanks for while.
>> >
>> > Luiz
>>
>>
>>
Re: AD Sites and Services Best Practices [message #160894 is a reply to message #160892] Thu, 10 September 2009 08:00 Go to previous messageGo to next message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
Intrasite replication is every 15 minutes by default, intersite replication
is every 3 hours by default. So if you have two seperate sites than the two
will converge every 3 hours.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Luiz" <Luiz@discussions.microsoft.com> wrote in message
news:7123078C-DB06-46D2-906D-8D516A49A328@microsoft.com...
> Hi Marcin,
>
> thanks for the response.
> Yes, I do have separate domain controllers.
> So, If I do not move the DC the default replication time is 15 minutes in
> a
> hour, is that correct?
>
> Thanks again.
>
> Best Regards.
>
> Luiz
>
>
>
> "Marcin" wrote:
>
>> Luiz,
>> does this mean that you have four separate domains (each corresponding to
>> the physical location)? If so, placing a DC that is part of the "Main
>> Office" domain in branch offices will actually increase replication.
>> Setting
>> up additional DCs from other domains in each site would primarily depend
>> on
>> whether you have users from each office visit other locations on regular
>> basis (so they can be authenticated by a local DC - rather than having to
>> authenticate over WAN)
>>
>> hth
>> Marcin
>>
>> "Luiz" <Luiz@discussions.microsoft.com> wrote in message
>> news:377A9372-BAE7-43BC-91FA-8477CCE5E0CA@microsoft.com...
>> > Hi,
>> >
>> > I am implementing a new Windows 2003 Active Directory environment and I
>> > would like to know If anyone can help me about AD Sites and Services
>> > Best
>> > Practices/Strategy:
>> > - my environment is a Main Office with 3 Branch Offices and each Branch
>> > Office will have a Domain Controller (Windows 2003).
>> > I will create the subnets for each site (Main Office and Branch Office)
>> > so
>> > each Domain Controller will stay in your site.
>> > One question:
>> > - In Branch Office Site, besides the local DC, should I put the Main
>> > Office
>> > DC to get a better replication performance?
>> > If I put the Main Office DC in Branch Office Site this will mean that
>> > the
>> > Branch Office workstations will log on in the Main Office DC too, is
>> > that
>> > right?
>> > But in compensation the passwords will replicate quicker, ok?
>> >
>> > If anyone has a tip I appreciate.
>> >
>> > Thanks for while.
>> >
>> > Luiz
>>
>>
>>
Re: AD Sites and Services Best Practices [message #160896 is a reply to message #160893] Thu, 10 September 2009 08:12 Go to previous messageGo to next message
Luiz  is currently offline Luiz
Messages: 119
Registered: July 2009
Senior Member
Yes, I do.
I have the primary DC in Main Office and an additional DC in Branch Office.

"Marcin" wrote:

> Luiz,
> do you have separate domains?
>
> Marcin
>
> "Luiz" <Luiz@discussions.microsoft.com> wrote in message
> news:7123078C-DB06-46D2-906D-8D516A49A328@microsoft.com...
> > Hi Marcin,
> >
> > thanks for the response.
> > Yes, I do have separate domain controllers.
> > So, If I do not move the DC the default replication time is 15 minutes in
> > a
> > hour, is that correct?
> >
> > Thanks again.
> >
> > Best Regards.
> >
> > Luiz
> >
> >
> >
> > "Marcin" wrote:
> >
> >> Luiz,
> >> does this mean that you have four separate domains (each corresponding to
> >> the physical location)? If so, placing a DC that is part of the "Main
> >> Office" domain in branch offices will actually increase replication.
> >> Setting
> >> up additional DCs from other domains in each site would primarily depend
> >> on
> >> whether you have users from each office visit other locations on regular
> >> basis (so they can be authenticated by a local DC - rather than having to
> >> authenticate over WAN)
> >>
> >> hth
> >> Marcin
> >>
> >> "Luiz" <Luiz@discussions.microsoft.com> wrote in message
> >> news:377A9372-BAE7-43BC-91FA-8477CCE5E0CA@microsoft.com...
> >> > Hi,
> >> >
> >> > I am implementing a new Windows 2003 Active Directory environment and I
> >> > would like to know If anyone can help me about AD Sites and Services
> >> > Best
> >> > Practices/Strategy:
> >> > - my environment is a Main Office with 3 Branch Offices and each Branch
> >> > Office will have a Domain Controller (Windows 2003).
> >> > I will create the subnets for each site (Main Office and Branch Office)
> >> > so
> >> > each Domain Controller will stay in your site.
> >> > One question:
> >> > - In Branch Office Site, besides the local DC, should I put the Main
> >> > Office
> >> > DC to get a better replication performance?
> >> > If I put the Main Office DC in Branch Office Site this will mean that
> >> > the
> >> > Branch Office workstations will log on in the Main Office DC too, is
> >> > that
> >> > right?
> >> > But in compensation the passwords will replicate quicker, ok?
> >> >
> >> > If anyone has a tip I appreciate.
> >> >
> >> > Thanks for while.
> >> >
> >> > Luiz
> >>
> >>
> >>
>
>
>
Re: AD Sites and Services Best Practices [message #160898 is a reply to message #160885] Thu, 10 September 2009 08:19 Go to previous messageGo to next message
Luiz  is currently offline Luiz
Messages: 119
Registered: July 2009
Senior Member
Hi Meinolf,

thanks for the response.
Another question, when I promote a server to DC and it goes to the right
site and a partner is generate automatically, I don´t need to remove that DC,
is it right?


Thanks again.

Best Regards.

Luiz

"Meinolf Weber [MVP-DS]" wrote:

> Hello Luiz,
>
> In AD sites and services you have to reflect the physical structure with
> the sites and there beloging subnets. So if the Main site use a different
> subnet then the branches, what i assume, you have to keep the main site DC
> in it's own site. You can lower the replciation between sites in AD sites
> and services to 15 minutes or with some more configuration to more or less
> immediate. But if you know where the user is located for password change,
> just choose the correct site DC and change the password on this one.
>
> See this one for lower more then 15 minutes, but keep in mind this creates
> a lot of traffic:
> http://www.frickelsoft.net/blog/?p=145
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hi,
> >
> > I am implementing a new Windows 2003 Active Directory environment and
> > I
> > would like to know If anyone can help me about AD Sites and Services
> > Best
> > Practices/Strategy:
> > - my environment is a Main Office with 3 Branch Offices and each
> > Branch
> > Office will have a Domain Controller (Windows 2003).
> > I will create the subnets for each site (Main Office and Branch
> > Office) so
> > each Domain Controller will stay in your site.
> > One question:
> > - In Branch Office Site, besides the local DC, should I put the Main
> > Office
> > DC to get a better replication performance?
> > If I put the Main Office DC in Branch Office Site this will mean that
> > the
> > Branch Office workstations will log on in the Main Office DC too, is
> > that
> > right?
> > But in compensation the passwords will replicate quicker, ok?
> > If anyone has a tip I appreciate.
> >
> > Thanks for while.
> >
> > Luiz
> >
>
>
>
Re: AD Sites and Services Best Practices [message #160899 is a reply to message #160886] Thu, 10 September 2009 08:20 Go to previous messageGo to next message
Luiz  is currently offline Luiz
Messages: 119
Registered: July 2009
Senior Member
Thank you again, Meinolf.

Best Regards.

Luiz

"Meinolf Weber [MVP-DS]" wrote:

> Hello Luiz,
>
> Also see:
> http://technet.microsoft.com/en-us/library/cc755768(WS.10).aspx
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hi,
> >
> > I am implementing a new Windows 2003 Active Directory environment and
> > I
> > would like to know If anyone can help me about AD Sites and Services
> > Best
> > Practices/Strategy:
> > - my environment is a Main Office with 3 Branch Offices and each
> > Branch
> > Office will have a Domain Controller (Windows 2003).
> > I will create the subnets for each site (Main Office and Branch
> > Office) so
> > each Domain Controller will stay in your site.
> > One question:
> > - In Branch Office Site, besides the local DC, should I put the Main
> > Office
> > DC to get a better replication performance?
> > If I put the Main Office DC in Branch Office Site this will mean that
> > the
> > Branch Office workstations will log on in the Main Office DC too, is
> > that
> > right?
> > But in compensation the passwords will replicate quicker, ok?
> > If anyone has a tip I appreciate.
> >
> > Thanks for while.
> >
> > Luiz
> >
>
>
>
Re: AD Sites and Services Best Practices [message #160900 is a reply to message #160888] Thu, 10 September 2009 08:21 Go to previous messageGo to next message
Luiz  is currently offline Luiz
Messages: 119
Registered: July 2009
Senior Member
Hi Paul,

thank you for the response.

Best Regards.

Luiz

"Paul Bergson [MVP-DS]" wrote:

> Microsoft has a document specific to what your subject line states
> http://technet.microsoft.com/en-us/library/cc755768(WS.10).aspx
>
> --
> Paul Bergson
> MVP - Directory Services
> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
> 2008, 2003, 2000 (Early Achiever), NT4
> Microsoft's Thrive IT Pro of the Month - June 2009
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup This
> posting is provided "AS IS" with no warranties, and confers no rights.
>
> "Luiz" <Luiz@discussions.microsoft.com> wrote in message
> news:377A9372-BAE7-43BC-91FA-8477CCE5E0CA@microsoft.com...
> > Hi,
> >
> > I am implementing a new Windows 2003 Active Directory environment and I
> > would like to know If anyone can help me about AD Sites and Services Best
> > Practices/Strategy:
> > - my environment is a Main Office with 3 Branch Offices and each Branch
> > Office will have a Domain Controller (Windows 2003).
> > I will create the subnets for each site (Main Office and Branch Office) so
> > each Domain Controller will stay in your site.
> > One question:
> > - In Branch Office Site, besides the local DC, should I put the Main
> > Office
> > DC to get a better replication performance?
> > If I put the Main Office DC in Branch Office Site this will mean that the
> > Branch Office workstations will log on in the Main Office DC too, is that
> > right?
> > But in compensation the passwords will replicate quicker, ok?
> >
> > If anyone has a tip I appreciate.
> >
> > Thanks for while.
> >
> > Luiz
>
>
>
Re: AD Sites and Services Best Practices [message #160942 is a reply to message #160898] Thu, 10 September 2009 23:18 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Luiz,

What do you mean with remove, from where? You have to control the DCs in
AD sites and services yourself.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi Meinolf,
>
> thanks for the response.
> Another question, when I promote a server to DC and it goes to the
> right
> site and a partner is generate automatically, I don´t need to remove
> that DC,
> is it right?
> Thanks again.
>
> Best Regards.
>
> Luiz
>
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello Luiz,
>>
>> In AD sites and services you have to reflect the physical structure
>> with the sites and there beloging subnets. So if the Main site use a
>> different subnet then the branches, what i assume, you have to keep
>> the main site DC in it's own site. You can lower the replciation
>> between sites in AD sites and services to 15 minutes or with some
>> more configuration to more or less immediate. But if you know where
>> the user is located for password change, just choose the correct site
>> DC and change the password on this one.
>>
>> See this one for lower more then 15 minutes, but keep in mind this
>> creates
>> a lot of traffic:
>> http://www.frickelsoft.net/blog/?p=145
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hi,
>>>
>>> I am implementing a new Windows 2003 Active Directory environment
>>> and
>>> I
>>> would like to know If anyone can help me about AD Sites and Services
>>> Best
>>> Practices/Strategy:
>>> - my environment is a Main Office with 3 Branch Offices and each
>>> Branch
>>> Office will have a Domain Controller (Windows 2003).
>>> I will create the subnets for each site (Main Office and Branch
>>> Office) so
>>> each Domain Controller will stay in your site.
>>> One question:
>>> - In Branch Office Site, besides the local DC, should I put the Main
>>> Office
>>> DC to get a better replication performance?
>>> If I put the Main Office DC in Branch Office Site this will mean
>>> that
>>> the
>>> Branch Office workstations will log on in the Main Office DC too, is
>>> that
>>> right?
>>> But in compensation the passwords will replicate quicker, ok?
>>> If anyone has a tip I appreciate.
>>> Thanks for while.
>>>
>>> Luiz
>>>
Re: AD Sites and Services Best Practices [message #160962 is a reply to message #160942] Fri, 11 September 2009 08:17 Go to previous message
Luiz  is currently offline Luiz
Messages: 119
Registered: July 2009
Senior Member
Hi Meinolf,

sorry, I was confused :-)

Thanks.


Best Regards.

Luiz

"Meinolf Weber [MVP-DS]" wrote:

> Hello Luiz,
>
> What do you mean with remove, from where? You have to control the DCs in
> AD sites and services yourself.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hi Meinolf,
> >
> > thanks for the response.
> > Another question, when I promote a server to DC and it goes to the
> > right
> > site and a partner is generate automatically, I don´t need to remove
> > that DC,
> > is it right?
> > Thanks again.
> >
> > Best Regards.
> >
> > Luiz
> >
> > "Meinolf Weber [MVP-DS]" wrote:
> >
> >> Hello Luiz,
> >>
> >> In AD sites and services you have to reflect the physical structure
> >> with the sites and there beloging subnets. So if the Main site use a
> >> different subnet then the branches, what i assume, you have to keep
> >> the main site DC in it's own site. You can lower the replciation
> >> between sites in AD sites and services to 15 minutes or with some
> >> more configuration to more or less immediate. But if you know where
> >> the user is located for password change, just choose the correct site
> >> DC and change the password on this one.
> >>
> >> See this one for lower more then 15 minutes, but keep in mind this
> >> creates
> >> a lot of traffic:
> >> http://www.frickelsoft.net/blog/?p=145
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>> Hi,
> >>>
> >>> I am implementing a new Windows 2003 Active Directory environment
> >>> and
> >>> I
> >>> would like to know If anyone can help me about AD Sites and Services
> >>> Best
> >>> Practices/Strategy:
> >>> - my environment is a Main Office with 3 Branch Offices and each
> >>> Branch
> >>> Office will have a Domain Controller (Windows 2003).
> >>> I will create the subnets for each site (Main Office and Branch
> >>> Office) so
> >>> each Domain Controller will stay in your site.
> >>> One question:
> >>> - In Branch Office Site, besides the local DC, should I put the Main
> >>> Office
> >>> DC to get a better replication performance?
> >>> If I put the Main Office DC in Branch Office Site this will mean
> >>> that
> >>> the
> >>> Branch Office workstations will log on in the Main Office DC too, is
> >>> that
> >>> right?
> >>> But in compensation the passwords will replicate quicker, ok?
> >>> If anyone has a tip I appreciate.
> >>> Thanks for while.
> >>>
> >>> Luiz
> >>>
>
>
>
Previous Topic:Setting up Time
Next Topic:Bad IP in [1Ch] Domain Controller record
Goto Forum:
  


Current Time: Sat Jan 20 08:30:03 MST 2018

Total time taken to generate the page: 0.11371 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software