Solved

domain controller in branch office

Posted on 2004-09-20
2
182 Views
Last Modified: 2010-04-19
Hello,

We are planning the deployment of the domain controllers to remote office. Now the question,
We have about 200 locations (some of them with 10 or 15 users only). We would like to deploy domain controllers only to
those place where it is necessary. The links are reliable and the phisical acess to the office is secure: There is no Exchange in the company and there is not other application which require a DC. It will be necessary DHCP, WINS and DNS (it could be a dns cache)


We would like to apply GPO :
- Default domain security policy
- a GPO based on the company
- a generic GPO for XP and W2K workstations.
- logon scripts based on each of locations.

Taking in accunt your experience,

Do you think with 20 or 30 users in a location it is justified to place a domain controller ?
Links are around 64kb (CIR) DSL.

if we decide to reduce the number of DC in the spoke locations, does it necessary a greater number of DC in the HUB location?

Regards,
Richard

0
Comment
Question by:intentalo69
2 Comments
 
LVL 16

Accepted Solution

by:
JamesDS earned 500 total points
Comment Utility
intentalo69
A GPO will not apply over a slow link. Slow link speed is also defined with GPOs - but by default is 500k.

I personally set my thresholds as follows for a similar sounding deployment (actually a police force):
Up to 20 users - No DC
20-100 Users - 1 DC
100+ Users - 2 DCs
every 500 users after that gets another DC

While this sounds easy enough, it depends largely on what traffic other than basic authentication traffic is hitting your DCs and how important it is that AD Services are maintained in the event of a WAN outage of one of more links.

Cheers

JamesDS
0
 

Expert Comment

by:downeysavings
Comment Utility
Our company (Banking Instituition) is also planning to deploy DC  at all our 180 branches, the reason we need to use a DC at all location, is to allow our tellers to access a file share on their branch server, even if the WAN link is not available.
 I rather not introduce 180 DC (HQ's is running Windows 2003 AD) at our remote locations, do you have any suggestions ?

Thanks
Bill
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Join & Write a Comment

I have never ceased to be amazed how many problems you can encounter on a fresh install of a Windows operating system.  This is certainly case in point& Unable to complete ANY MSI installation.  This means Windows Updates are failing and I can't …
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now