Re: Active Directory Design

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Hunter Coleman (glacialtill_at_yahoo.com)
Date: 09/27/04

  • Next message: Hunter Coleman: "Re: Active Directory Design"
    Date: Mon, 27 Sep 2004 14:43:25 -0600
    
    

    "I can see how a dc in each brach could get rid of several problems, but
    would it create so much traffic that it would end up creating more?"

    Not if you configure each branch as an AD site. That way, you'll be able to
    schedule replication traffic to occur between specific time windows. You can
    then configure a hub site, so you don't have direct replication between
    multiple 56k links. You'll still have some "leakage" traffic, such as
    account lockouts, that will happen outside of the replication schedule, but
    that traffic shouldn't be overwhelming.

    The Branch Office Deployment Guide has a lot of good information for your
    scenario.
    http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/branchoffice/default.asp
    (watch for the URL wrapping)

    --
    Hunter
    "Brian Anderson" <Brian Anderson@discussions.microsoft.com> wrote in message
    news:842FB216-0AE9-47DD-A491-70BA95A88C5B@microsoft.com...
    > What benefits would I gain by w2k3?  They are licensed for w2k3, but have
    not
    > implemented it due to deployment costs and past application compatibilty
    > problems.
    >
    > I should also note that the branch office's main app is sql based pos that
    > replicates back to the main office at the end of the day.  It is possible
    to
    > have a Windows XP machine act as the server for the POS app.  I can see
    how a
    > dc in each brach could get rid of several problems, but would it create so
    > much traffic that it would end up creating more?
    >
    > Also, Historically the Frame has only gone down for a few hours over the
    > last 5 years.
    >
    > "anonymous@discussions.microsoft.com" wrote:
    >
    > > I would start here
    > >
    > > http://www.microsoft.com/technet/prodtechnol/windows2000ser
    > > v/technologies/activedirectory/deploy/adguide/default.mspx
    > >
    > > I take it you can't use 2k3?  If not there is a reg
    > > hack/modification that will allow your clients at the
    > > remote site to still log on without a GC in there site.
    > > Although this is not recommended I have used it a few
    > > times for those rare cases of a 56k line that is shotty.
    > >
    > > Hope that helps.
    > >
    > > >-----Original Message-----
    > > >I am in the process for designing a network consisting of
    > > a main office and
    > > >about 70 branch offices with about 10 users in each
    > > branch.  The branch
    > > >offices are each connected to the main office through a
    > > 56k Frame Relay.  The
    > > >users in the branch office must be able to work locally
    > > even if the Frame
    > > >goes down.  The corporate office must be able to deploy
    > > group policy and
    > > >software updates from the main office.  The domain will
    > > be centrally managed
    > > >at the main office.  The clients range from Windows 95-XP
    > > >
    > > >Questions:
    > > >
    > > >What is the best way to minimize traffic over the frame?
    > > >Should I put a domain controller (Global Catalog) in
    > > every branch?
    > > >Would it be better to use subdomains?
    > > >
    > > >.
    > > >
    > >
    

  • Next message: Hunter Coleman: "Re: Active Directory Design"

    Relevant Pages

    • Re: SAM error
      ... you can restore it from a valid backup.... ... - Perform system state backup of the FSMO -IM DC ... disable outbound replication on the FSMO-IM DC ... are you saying that the IM and RID are on the same DC? ...
      (microsoft.public.windows.server.active_directory)
    • Re: SAM error
      ... ever I have to restore my FSMO RID let say If I have to backout for my ... disable outbound replication on the FSMO-IM DC ... replicating to DCs then ...
      (microsoft.public.windows.server.active_directory)
    • Re: Active Directory Design
      ... and control replication. ... Replication isn't really an issue with so few users - intersite replication ... The branch offices are each connected to the main office through a 56k Frame Relay. ... users in the branch office must be able to work locally even if the Frame goes down. ...
      (microsoft.public.win2000.active_directory)
    • Re: Cannot create the object because directory service was unable to allocate a relative identifier
      ... Solved by creating a replication object in ADS&S to the DC holding the RID ... not facing any problem even in the new server. ... Our RID master is the main DC for this domain running on Win2K3 SP1. ...
      (microsoft.public.win2000.active_directory)
    • Re: SAM error
      ... restore from my backup. ... you restored the DC with the RID FSMO AND the domain the RID FSMO belongs ... In technical terms it is called "initial replication ...
      (microsoft.public.windows.server.active_directory)