Re: what new 2008 AD features may I want to consider for this?
- From: "Paul Bergson [MVP-DS]" <pbbergs@xxxxxxxxxxxxxxx>
- Date: Thu, 26 Feb 2009 07:31:27 -0600
I would try and avoid making a DC anything other than just a DC (With the exception of it being an RODC which you suggested). If you have large numbers of users at remote sites or if your vpn connection is unreliable, then this is a perfect candidate for a dc at the remote location. If you have remote dc's setup then you need to ensure the bandwidth is available for replication and while setting this up the DS replication doesn't consume the bandwidth available. As far as an RODC is concerned you will need to make sure that each remote RODC has a 2008 writable dc available to it so that replication properly works, so you will have to upgrade more than the remote sites.
--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
http://www.pbbergs.com
Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.
"James" <noone@xxxxxxxxxxx> wrote in message news:ep$2uG4lJHA.1292@xxxxxxxxxxxxxxxxxxxxxxx
I will have a handful of sites geographically spread out across the globe... this active directory deployment is only to support a deployment system, which is using WDS and DFS-R, both of which require active directory. There is really only a couple of user accounts that will be used (by many users though, more like a role). There is a 'central' server where all edits to anything will be done from (like the share that is replicated via DFS-R), each other location will have a deployment server with a replica of this file share (each server will also be running DHCP/WDS to support deployment on it's subnet).
Right now I'm trying to figure out if I should make each of these other deployment servers member servers or additional domain controllers? One thing that comes to mind is avoiding user authentication over the WAN... I assume there are other considerations as well... is this a good scenario for the new Read-Only Domain Controller?
any input would be appreciated, thanks.
.
- Follow-Ups:
- References:
- Prev by Date: Re: Operations Master error
- Next by Date: Re: ADSI - List Group Membership
- Previous by thread: Re: what new 2008 AD features may I want to consider for this?
- Next by thread: Re: what new 2008 AD features may I want to consider for this?
- Index(es):
Relevant Pages
|
Loading
