Re: Domain Controller Redundancy

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: ptwilliams (ptw2001_at_hotmail.com)
Date: 10/13/04


Date: Wed, 13 Oct 2004 18:34:03 +0100

I didn't say it way necessary to have multiple domains - that would be
ridiculous information given the question.

I said that the IM *only* needs to be separated if there *is* multiple
domains and *not* all DCs are GCs. In any other scenario, the IM is not
needed.

It is redundant in a single domain, as there are no cross-domain phantoms;
and it is redundant in a multi-domain forest if all DCs are GCs because each
GC stores a partial replica of all objects, one attribute of which is
DN -thus, there are no phantom objects because the GC knows of all objects.

This may help explain:
 -- http://www.msresource.net/content/view/14/46/

-- 
Paul Williams
http://www.msresource.net
http://forums.msresource.net
______________________________________
"Valentin Allert" <Valentin_Allert@hotmail.com> wrote in message 
news:uQlJ1wDsEHA.3076@TK2MSFTNGP10.phx.gbl...
no microsoft help text in german says that you have to split the
infrastructure master and the GC, if you don't have a GC on all DC. It is
not necessary to have multi domains only multi DCs
"ptwilliams" <ptw2001@hotmail.com> schrieb im Newsbeitrag
news:uTj5m7CsEHA.1164@TK2MSFTNGP10.phx.gbl...
> Yes that's fine.  This is only an issue when there are multiple domains
> and
> not all DCs are GCs.  Otherwise, the IM role holder is defunct.
>
>
> -- 
>
> Paul Williams
>
> http://www.msresource.net
> http://forums.msresource.net
> ______________________________________
> "fnstrat2" <fnstrat2@discussions.microsoft.com> wrote in message
> news:087F7305-8B4E-4770-81A1-DCBCFA940881@microsoft.com...
> Also, with two DC's it is ok to have the GC on the Infrastructure Master
> as
> long as the second DC is also a GC.
>
> "Andrea" wrote:
>
>> Hi,
>>
>>
>>
>> I have two domain controllers on my domain (one SBS2003 server (DHCP +
>> DNS
>> server) and one Windows 2003 server).
>>
>> I want to have the domain controllers configured to so that if either one
>> is
>> unavailable users on
>>
>> the network will still be able to logon and be authenticated.
>>
>>
>>
>> These are my questions :
>>
>>
>>
>> 1 - In order for a DC (domain controller) to authenticate clients it
>> needs
>> to be a GC (Global Catalog Server) ? Do I have to configure the Windows
>> 2003
>> DC server as a GC ?
>>
>>
>>
>> 2 - DHCP : to provide DHCP redundancy do I have to configure DHCP scopes
>> for
>> two different ranges, disable the DHCP server service on my Windows 2003
>> server and enable it when my SBS2003 fails ?
>>
>>
>>
>> 3 - DNS : forward and reverse zones on SBS2003 are Active-Directory
>> Integrated zones. How do I have to configure DNS zones on my Windows 2003
>> server ? How do I have to set up primary and secondary DNS server
>> addresses
>> on my lan network cards ? (primary = itself, secondary = the other DC ?).
>>
>>
>>
>> Thanks,
>>
>> Andrea
>>
>>
>>
>
>


Relevant Pages

  • Re: 2003 AD R2 schema upgrade from Win 2000 Server?
    ... What he is telling you is to upgrade to R2 you need to do it from a DC ... if I try to upgrade the schema from the Windows 2000 server and then ... DCs located in three sites. ...
    (microsoft.public.windows.server.active_directory)
  • =?iso-8859-1?Q?Re:_W2K-Dom=E4ne_und_W2K3-BDC_zum_PDC_machen?=
    ... Das geht nur bei DCs. ... Du musst im ersten Schritt das Schema aktualisieren bzw. auf Windows Server ... sollte, beachte bitte, dass du das ADPREP von der zweiten R2 CD verwendest. ...
    (microsoft.public.de.german.windows.server.general)
  • Re: RIS 2003 wont work with NTLMv2!!
    ... > Windows 2000 SP4 DC ... > NTLM settings on the DCs at the Forest Root are: ... >> OS and service pack levels of all DCs and RIS servers. ... >> RIS server also a DC or a DHCP server? ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: LSASS.exe process near 100% usage
    ... Try pulling the network cable from the back of the server when the spike ... Do the DCs ever reboot on their own? ... The DC that was not gracefully demoted, was it a FSMO Role holder? ... 824196 Description of the License Logging Service in Windows Server ...
    (microsoft.public.windows.server.general)
  • Re: LSASS.exe process near 100% usage
    ... Try pulling the network cable from the back of the server when the spike ... Do the DCs ever reboot on their own? ... The DC that was not gracefully demoted, was it a FSMO Role holder? ... 824196 Description of the License Logging Service in Windows Server ...
    (microsoft.public.windows.server.active_directory)